From patchwork Thu Jun 18 15:38:04 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Szabolcs Nagy X-Patchwork-Id: 39672 Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id B54733890421; Thu, 18 Jun 2020 15:38:20 +0000 (GMT) X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70070.outbound.protection.outlook.com [40.107.7.70]) by sourceware.org (Postfix) with ESMTPS id 617E33840C2A for ; Thu, 18 Jun 2020 15:38:16 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 617E33840C2A Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=arm.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=Szabolcs.Nagy@arm.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LjXCyBZ68jpdlW97JOpmrjC9McHfjNR2GZ6XtgzSM8k=; b=MBWd41WJMywWlUfd/SL1Lsl+Uk3x21zFaj5awl42C9YFu0WU21eZikQ5hLORQePR53b01sYBc0YYTeFtc9CNW3oYJtJ4PXyDt5or5jSX1VamRi/TLFNR4gfc3y+9QRWlwdu9WIEN/mi0hHdjXxZhhxM4u7HeahZX2Kep2vYjPZI= Received: from AM5PR1001CA0016.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:206:2::29) by VI1PR08MB4384.eurprd08.prod.outlook.com (2603:10a6:803:fd::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.19; Thu, 18 Jun 2020 15:38:14 +0000 Received: from VE1EUR03FT031.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:2:cafe::e1) by AM5PR1001CA0016.outlook.office365.com (2603:10a6:206:2::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22 via Frontend Transport; Thu, 18 Jun 2020 15:38:14 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; sourceware.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; sourceware.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT031.mail.protection.outlook.com (10.152.18.69) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3109.22 via Frontend Transport; Thu, 18 Jun 2020 15:38:14 +0000 Received: ("Tessian outbound 830790f176a8:v59"); Thu, 18 Jun 2020 15:38:13 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 1fe53fcc97e1c399 X-CR-MTA-TID: 64aa7808 Received: from 57517c315efc.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 9BB92B31-ACDB-483F-AC21-9E933F949B88.1; Thu, 18 Jun 2020 15:38:08 +0000 Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 57517c315efc.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 18 Jun 2020 15:38:08 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d6RfSXVMv1c9kvs0XF8HVBDeYctMPAuVlyxtrNQCZgEehqLLJwc6VZ1RHEvpRbNbtTSROLSvY/GqMunGO5Qt6lGdBMB87BNCHmr/SUwKAsLVmoKv6rGHWuoOTzjVmYuUj6S4P/OdW4tkSejg1UTAwi3yOwLjA42WSiTJjas/zyQY+L3RhWmBgO/KayhdCvNXHrK2ws86A4sZHnIz3ksbl7m2HwfsA2RzqOGfLBTEGSELkWZfb3xdPAxhmg+U1sNzGo4D49hhkAd4LlNFf5+6Q75R5v106rnhtaxXLnl2l5244RGATZw0QxzNfJW1qgGmSQF+eSJkD9cELR9nrNC5fg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LjXCyBZ68jpdlW97JOpmrjC9McHfjNR2GZ6XtgzSM8k=; b=En6eXvFy/JesMfBDkfUdwgP+9PYhf/YsG6PeOjbb9mp6cXmA2WhTkB95gOqQ5ltzeG5suK3Kp9chR+PGTYNtO1MjJSNGvajMbNmOAdJ81LC84SI+E4bsBUNH+7WEaxY3nVPgx8Ga0XkwbcoTGzAQp68eDCFNjrMGA08tknZZRqXhbdzH8QzOdvN2IjhFUuJsiw2sn5T/Xt2eUqpNFQRkkbiCa6z0Mw0shC487zlWCnp3yVvyHyHtMb0tTL4WvFnQooJtsbNRjK4QptWRLMr3GkUKv9HMtZ/ZBaIrnr5xaUmtMDzCqHPfessLi70R/viET5ggbNhYt5jm1/HRQ6Gkeg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LjXCyBZ68jpdlW97JOpmrjC9McHfjNR2GZ6XtgzSM8k=; b=MBWd41WJMywWlUfd/SL1Lsl+Uk3x21zFaj5awl42C9YFu0WU21eZikQ5hLORQePR53b01sYBc0YYTeFtc9CNW3oYJtJ4PXyDt5or5jSX1VamRi/TLFNR4gfc3y+9QRWlwdu9WIEN/mi0hHdjXxZhhxM4u7HeahZX2Kep2vYjPZI= Authentication-Results-Original: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; Received: from AM6PR08MB3047.eurprd08.prod.outlook.com (2603:10a6:209:4c::23) by AM6PR08MB4881.eurprd08.prod.outlook.com (2603:10a6:20b:c8::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.26; Thu, 18 Jun 2020 15:38:06 +0000 Received: from AM6PR08MB3047.eurprd08.prod.outlook.com ([fe80::2404:de9f:78c0:313c]) by AM6PR08MB3047.eurprd08.prod.outlook.com ([fe80::2404:de9f:78c0:313c%6]) with mapi id 15.20.3088.029; Thu, 18 Jun 2020 15:38:06 +0000 Date: Thu, 18 Jun 2020 16:38:04 +0100 From: Szabolcs Nagy To: "H.J. Lu" Subject: [PATCH v5 07/12] aarch64: enable BTI at runtime Message-ID: <20200618153804.GT4066@arm.com> References: <54457ff0e2755acadc87dbf154b78a6f21cc19c8.1591899092.git.szabolcs.nagy@arm.com> <20200612150822.GA9321@arm.com> Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) X-ClientProxiedBy: LO2P123CA0053.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:1::17) To AM6PR08MB3047.eurprd08.prod.outlook.com (2603:10a6:209:4c::23) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from arm.com (217.140.106.53) by LO2P123CA0053.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:1::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend Transport; Thu, 18 Jun 2020 15:38:06 +0000 X-Originating-IP: [217.140.106.53] X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 27777f63-b86b-4020-65fe-08d8139d9d3e X-MS-TrafficTypeDiagnostic: AM6PR08MB4881:|VI1PR08MB4384: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true NoDisclaimer: true X-MS-Oob-TLC-OOBClassifiers: OLM:5236;OLM:5236; X-Forefront-PRVS: 0438F90F17 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: fgySk1PM7ihCS2NHF1hTnlKqyTL9Ut2it36XlQ9sSk2v6/k6MsVxnYcSxLEoQzpZaoNmAxBIkhA5KXFJfekCQb4BuHOASgHr1iXL1izADmW2h/n6MiUTFiqKjnMtNvXyueWaO1a/ZBILWcjkAn3+KHTkmZqjl/IYER63mA60s1+/7gmAwtbLgiP5/7trqIF459cv+bZVmEOz0CbVNXoWneuxdVEZ/7bBsl4DB8fFKKpsxAn1Ts5VJApz98wMXxS06Zht/WpFrix0Cge3guPrIt/N84bRnbSYy7QaQ/xZ3Gb7RUspOb8BXkJ1AauCtUj0Gx7d8jxAZNYE7y15nEFyIHoD79hGkU+ncdsmW0HW2ypfzD5y6VJ2cXdVd1BtIoRD X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3047.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(136003)(396003)(39860400002)(376002)(366004)(66476007)(83380400001)(7696005)(66616009)(66946007)(235185007)(66556008)(33964004)(52116002)(53546011)(1076003)(5660300002)(4326008)(33656002)(316002)(6916009)(8886007)(44144004)(2906002)(54906003)(2616005)(186003)(8936002)(8676002)(86362001)(478600001)(44832011)(16526019)(26005)(956004)(36756003)(55016002)(2700100001); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData: 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 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4881 Original-Authentication-Results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT031.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(39860400002)(396003)(136003)(46966005)(86362001)(186003)(478600001)(1076003)(4326008)(81166007)(6862004)(33964004)(5660300002)(82740400003)(26005)(16526019)(2906002)(53546011)(44144004)(55016002)(47076004)(7696005)(54906003)(235185007)(83380400001)(316002)(70586007)(336012)(36906005)(66616009)(70206006)(33656002)(44832011)(36756003)(2616005)(82310400002)(956004)(8886007)(8936002)(8676002)(356005)(2700100001); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 6d556343-7f83-43b6-d7aa-08d8139d9885 X-Forefront-PRVS: 0438F90F17 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: mkaCiVzSuzabay+igeaCzDLjuMizMWsTLBzpUW9cqISOUL28NqtkBCt9ZZod4OthC2csS5rkAYglxtNvw196Kv7fN95SZTQwZChgA4pcpv77O7QFMqgig9Eqys3IsAproCutCBmjFKHxrpuI6ftWWK07BNQ1gBVC9UEYmds06lpt52jY57Fhe1NF7OLVB3JDQ9IoHsEC/I08/2goLML1rCAd7brhTRptub8EoFlamJMXglGojOreRnFiM689dPlzTRHGOGVtP54BwfWAXlXA66l7+dWrBRiD4dCAME21jBfk6p8qgNEhLvQ/u2spON5zGJgOW5JK7eRh9wc8i3Ux+11/f33VDUZDdAzIXDCKKAkLd2eONbn7vy6GbZucPemHiFBiEoADumGecYnG52qKBQ8ki3iZ/2hdJwSmQldJpHc= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jun 2020 15:38:14.0361 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 27777f63-b86b-4020-65fe-08d8139d9d3e X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB4384 X-Spam-Status: No, score=-17.0 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, GIT_PATCH_0, KAM_SHORT, MSGID_FROM_MTA_HEADER, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2, SPF_HELO_PASS, SPF_PASS, TXREP, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Sudakshina Das , GNU C Library Errors-To: libc-alpha-bounces@sourceware.org Sender: "Libc-alpha" The 06/12/2020 08:18, H.J. Lu wrote: > On Fri, Jun 12, 2020 at 8:08 AM Szabolcs Nagy wrote: > > The 06/12/2020 06:43, H.J. Lu wrote: > > > Can you make _dl_process_pt_gnu_property more generic so that it > > > can be shared with x86? If there is PT_GNU_PROPERTY, we don't > > > need to check for multiple property notes. Thanks. > > > > it can use a hook for NT_GNU_PROPERTY_TYPE_0 notes > > that is called for each property, e.g. > > > > int > > _dl_process_gnu_property_note0(uint32_t type, uint32_t datasz, const void *data); i also had to pass the link_map. > > however this only helps on x86 if PT_GNU_PROPERTY > > processing is before PT_NOTE processing otherwise > > you cannot skip handling the notes. > > On x86-64, there are > > Program Headers: > Type Offset VirtAddr PhysAddr > FileSiz MemSiz Flags Align ... > NOTE 0x0000000000000338 0x0000000000000338 0x0000000000000338 > 0x0000000000000020 0x0000000000000020 R 0x8 > NOTE 0x0000000000000358 0x0000000000000358 0x0000000000000358 > 0x0000000000000044 0x0000000000000044 R 0x4 > GNU_PROPERTY 0x0000000000000338 0x0000000000000338 0x0000000000000338 > 0x0000000000000020 0x0000000000000020 R 0x8 ... > Only the PT_NOTE segment with the correct alignment may contain property. > In the first pass, we record such PT_NOTE segment, but don't process it. > After all segments have been processed, we process the saved PT_NOTE segment > if there is no GNU_PROPERTY segment. i refactored the code but didn't change the x86 side. note: in rtld there is only one pass (load segments are already mapped) while dlopen does the property handling in the second pass over program headers. attaching v5 of the patch: - moved _dl_process_pt_gnu_property to generic code (into dl-load.c), this assumes PT_GNU_PROPERTY is a gnu platform abi and the integer types used for accessing it work on all targets. - made _dl_process_pt_gnu_property return type void and remove all failure handling (invalid notes are ignored). - only handle one NT_GNU_PROPERTY_TYPE_0. - added _dl_process_gnu_property target hook. - removed reviewed-by because of significant changes. tested on aarch64. From f03a3dfaa7e497b4413e59d2ab42942e25dcaeef Mon Sep 17 00:00:00 2001 From: Sudakshina Das Date: Tue, 17 Mar 2020 15:54:12 +0000 Subject: [PATCH v5 07/12] aarch64: enable BTI at runtime Binaries can opt-in to using BTI via an ELF object file marking. The dynamic linker has to then mprotect the executable segments with PROT_BTI. In case of static linked executables or in case of the dynamic linker itself, PROT_BTI protection is done by the operating system. On AArch64 glibc uses PT_GNU_PROPERTY instead of PT_NOTE to check the properties of a binary because PT_NOTE can be unreliable with old linkers (old linkers just append the notes of input objects together and add them to the output without checking them for consistency which means multiple incompatible GNU property notes can be present in PT_NOTE). The PT_GNU_PROPERTY handling is generic and shared between rtld and dlopen and largely follows the logic of the existing x86_64 note processing code, but only handles a single NT_GNU_PROPERTY_TYPE_0 note. A new _dl_process_gnu_property target hook is introduced in dl-prop.h which is called for each property, this happens after PT_LOAD segments are mapped. PT_GNU_PROPERTY handling has no failure mode, invalid content is ignored. BTI property is handled in the loader even if glibc is not built with BTI support, so in theory user code can be BTI protected independently of glibc. In practice though user binaries are not marked with the BTI property if glibc has no support because the static linked libc objects (crt files, libc_nonshared.a) are unmarked. This patch relies on Linux userspace API that is merged before the v5.8-rc1 tag and scheduled to be in Linux 5.8. Co-authored-by: Szabolcs Nagy --- elf/dl-load.c | 81 +++++++++++++++++++ elf/rtld.c | 4 + sysdeps/aarch64/Makefile | 4 + sysdeps/aarch64/dl-bti.c | 54 +++++++++++++ sysdeps/aarch64/dl-prop.h | 75 +++++++++++++++++ sysdeps/aarch64/linkmap.h | 3 + sysdeps/generic/dl-prop.h | 19 +++-- sysdeps/generic/ldsodefs.h | 4 + sysdeps/unix/sysv/linux/aarch64/bits/hwcap.h | 1 + sysdeps/unix/sysv/linux/aarch64/bits/mman.h | 31 +++++++ .../unix/sysv/linux/aarch64/cpu-features.c | 3 + .../unix/sysv/linux/aarch64/cpu-features.h | 2 + sysdeps/x86/dl-prop.h | 7 ++ 13 files changed, 283 insertions(+), 5 deletions(-) create mode 100644 sysdeps/aarch64/dl-bti.c create mode 100644 sysdeps/aarch64/dl-prop.h create mode 100644 sysdeps/unix/sysv/linux/aarch64/bits/mman.h diff --git a/elf/dl-load.c b/elf/dl-load.c index 06f2ba7264..66bd0ca0a3 100644 --- a/elf/dl-load.c +++ b/elf/dl-load.c @@ -853,6 +853,77 @@ lose (int code, int fd, const char *name, char *realname, struct link_map *l, } +/* Process PT_GNU_PROPERTY program header PH in module L after + PT_LOAD segments are mapped. Only one NT_GNU_PROPERTY_TYPE_0 + note is handled which contains processor specific properties. */ + +void +_dl_process_pt_gnu_property (struct link_map *l, const ElfW(Phdr) *ph) +{ + const ElfW(Nhdr) *note = (const void *) (ph->p_vaddr + l->l_addr); + const ElfW(Addr) size = ph->p_memsz; + const ElfW(Addr) align = ph->p_align; + + /* The NT_GNU_PROPERTY_TYPE_0 note must be aligned to 4 bytes in + 32-bit objects and to 8 bytes in 64-bit objects. Skip notes + with incorrect alignment. */ + if (align != (__ELF_NATIVE_CLASS / 8)) + return; + + const ElfW(Addr) start = (ElfW(Addr)) note; + unsigned int last_type = 0; + + while ((ElfW(Addr)) (note + 1) - start < size) + { + /* Find the NT_GNU_PROPERTY_TYPE_0 note. */ + if (note->n_namesz == 4 + && note->n_type == NT_GNU_PROPERTY_TYPE_0 + && memcmp (note + 1, "GNU", 4) == 0) + { + /* Check for invalid property. */ + if (note->n_descsz < 8 + || (note->n_descsz % sizeof (ElfW(Addr))) != 0) + return; + + /* Start and end of property array. */ + unsigned char *ptr = (unsigned char *) (note + 1) + 4; + unsigned char *ptr_end = ptr + note->n_descsz; + + do + { + unsigned int type = *(unsigned int *) ptr; + unsigned int datasz = *(unsigned int *) (ptr + 4); + + /* Property type must be in ascending order. */ + if (type < last_type) + return; + + ptr += 8; + if ((ptr + datasz) > ptr_end) + return; + + last_type = type; + + /* Target specific property processing. */ + if (_dl_process_gnu_property(l, type, datasz, ptr) == 0) + return; + + /* Check the next property item. */ + ptr += ALIGN_UP (datasz, sizeof (ElfW(Addr))); + } + while ((ptr_end - ptr) >= 8); + + /* Only handle one NT_GNU_PROPERTY_TYPE_0. */ + return; + } + + note = ((const void *) note + + ELF_NOTE_NEXT_OFFSET (note->n_namesz, note->n_descsz, + align)); + } +} + + /* Map in the shared object NAME, actually located in REALNAME, and already opened on FD. */ @@ -1188,6 +1259,16 @@ _dl_map_object_from_fd (const char *name, const char *origname, int fd, maplength, has_holes, loader); if (__glibc_unlikely (errstring != NULL)) goto call_lose; + + /* Process program headers again after load segments are mapped in + case processing requires accessing those segments. */ + for (ph = phdr; ph < &phdr[l->l_phnum]; ++ph) + switch (ph->p_type) + { + case PT_GNU_PROPERTY: + _dl_process_pt_gnu_property (l, ph); + break; + } } if (l->l_ld == 0) diff --git a/elf/rtld.c b/elf/rtld.c index 882b070cc0..3ad2bf5079 100644 --- a/elf/rtld.c +++ b/elf/rtld.c @@ -1508,6 +1508,10 @@ of this helper program; chances are you did not intend to run this program.\n\ main_map->l_relro_size = ph->p_memsz; break; + case PT_GNU_PROPERTY: + _dl_process_pt_gnu_property (main_map, ph); + break; + case PT_NOTE: if (_rtld_process_pt_note (main_map, ph)) _dl_error_printf ("\ diff --git a/sysdeps/aarch64/Makefile b/sysdeps/aarch64/Makefile index 9cb141004d..5ae8b082b0 100644 --- a/sysdeps/aarch64/Makefile +++ b/sysdeps/aarch64/Makefile @@ -1,5 +1,9 @@ long-double-fcts = yes +ifeq ($(subdir),elf) +sysdep-dl-routines += dl-bti +endif + ifeq ($(subdir),elf) sysdep-dl-routines += tlsdesc dl-tlsdesc gen-as-const-headers += dl-link.sym diff --git a/sysdeps/aarch64/dl-bti.c b/sysdeps/aarch64/dl-bti.c new file mode 100644 index 0000000000..3c92377cc8 --- /dev/null +++ b/sysdeps/aarch64/dl-bti.c @@ -0,0 +1,54 @@ +/* AArch64 BTI functions. + Copyright (C) 2020 Free Software Foundation, Inc. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#include +#include +#include +#include + +static int +enable_bti (struct link_map *map, const char *program) +{ + const ElfW(Phdr) *phdr; + unsigned prot = PROT_READ | PROT_EXEC | PROT_BTI; + + for (phdr = map->l_phdr; phdr < &map->l_phdr[map->l_phnum]; ++phdr) + if (phdr->p_type == PT_LOAD && (phdr->p_flags & PF_X)) + { + ElfW(Addr) start = phdr->p_vaddr + map->l_addr; + ElfW(Addr) len = phdr->p_memsz; + if (__mprotect ((void *) start, len, prot) < 0) + { + if (program) + _dl_fatal_printf ("%s: mprotect failed to turn on BTI\n", + map->l_name); + else + _dl_signal_error (errno, map->l_name, "dlopen", + N_("mprotect failed to turn on BTI")); + } + } + return 0; +} + +/* Enable BTI for L if required. */ + +void +_dl_bti_check (struct link_map *l, const char *program) +{ + if (GLRO(dl_aarch64_cpu_features).bti && l->l_mach.bti) + enable_bti (l, program); +} diff --git a/sysdeps/aarch64/dl-prop.h b/sysdeps/aarch64/dl-prop.h new file mode 100644 index 0000000000..70edc52145 --- /dev/null +++ b/sysdeps/aarch64/dl-prop.h @@ -0,0 +1,75 @@ +/* Support for GNU properties. AArch64 version. + Copyright (C) 2018-2020 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#ifndef _DL_PROP_H +#define _DL_PROP_H + +#include + +extern void _dl_bti_check (struct link_map *, const char *) + attribute_hidden; + +static inline void __attribute__ ((always_inline)) +_rtld_main_check (struct link_map *m, const char *program) +{ + _dl_bti_check (m, program); +} + +static inline void __attribute__ ((always_inline)) +_dl_open_check (struct link_map *m) +{ + _dl_bti_check (m, NULL); +} + +#ifdef FILEBUF_SIZE +static inline int __attribute__ ((always_inline)) +_dl_process_pt_note (struct link_map *l, const ElfW(Phdr) *ph, + int fd, struct filebuf *fbp) +{ + return 0; +} +#endif + +static inline int __attribute__ ((always_inline)) +_rtld_process_pt_note (struct link_map *l, const ElfW(Phdr) *ph) +{ + return 0; +} + +static inline int +_dl_process_gnu_property (struct link_map *l, uint32_t type, uint32_t datasz, + void *data) +{ + if (type == GNU_PROPERTY_AARCH64_FEATURE_1_AND) + { + /* Stop if the property note is ill-formed. */ + if (datasz != 4) + return 0; + + unsigned int feature_1 = *(unsigned int *) data; + if (feature_1 & GNU_PROPERTY_AARCH64_FEATURE_1_BTI) + l->l_mach.bti = true; + + /* Stop if we processed the property note. */ + return 0; + } + /* Continue. */ + return 1; +} + +#endif /* _DL_PROP_H */ diff --git a/sysdeps/aarch64/linkmap.h b/sysdeps/aarch64/linkmap.h index 943a9ee9e4..847a03ace2 100644 --- a/sysdeps/aarch64/linkmap.h +++ b/sysdeps/aarch64/linkmap.h @@ -16,8 +16,11 @@ License along with the GNU C Library; if not, see . */ +#include + struct link_map_machine { ElfW(Addr) plt; /* Address of .plt */ void *tlsdesc_table; /* Address of TLS descriptor hash table. */ + bool bti; /* Branch Target Identification is enabled. */ }; diff --git a/sysdeps/generic/dl-prop.h b/sysdeps/generic/dl-prop.h index 6b0f2aa95a..ceb6f623ee 100644 --- a/sysdeps/generic/dl-prop.h +++ b/sysdeps/generic/dl-prop.h @@ -20,11 +20,11 @@ #define _DL_PROP_H /* The following functions are used by the dynamic loader and the - dlopen machinery to process PT_NOTE entries in the binary or - shared object. The notes can be used to change the behaviour of - the loader, and as such offer a flexible mechanism for hooking in - various checks related to ABI tags or implementing "flag day" ABI - transitions. */ + dlopen machinery to process PT_NOTE and PT_GNU_PROPERTY entries in + the binary or shared object. The notes can be used to change the + behaviour of the loader, and as such offer a flexible mechanism + for hooking in various checks related to ABI tags or implementing + "flag day" ABI transitions. */ static inline void __attribute__ ((always_inline)) _rtld_main_check (struct link_map *m, const char *program) @@ -51,4 +51,13 @@ _rtld_process_pt_note (struct link_map *l, const ElfW(Phdr) *ph) return 0; } +/* Called for each property in the NT_GNU_PROPERTY_TYPE_0 note of L, + processing of the properties continues until this returns 0. */ +static inline int __attribute__ ((always_inline)) +_dl_process_gnu_property (struct link_map *l, uint32_t type, uint32_t datasz, + void *data) +{ + return 0; +} + #endif /* _DL_PROP_H */ diff --git a/sysdeps/generic/ldsodefs.h b/sysdeps/generic/ldsodefs.h index d08b97a5ef..c525ffa12c 100644 --- a/sysdeps/generic/ldsodefs.h +++ b/sysdeps/generic/ldsodefs.h @@ -910,6 +910,10 @@ extern void _dl_setup_hash (struct link_map *map) attribute_hidden; extern void _dl_rtld_di_serinfo (struct link_map *loader, Dl_serinfo *si, bool counting); +/* Process PT_GNU_PROPERTY program header PH in module L after + PT_LOAD segments are mapped. */ +void _dl_process_pt_gnu_property (struct link_map *l, const ElfW(Phdr) *ph); + /* Search loaded objects' symbol tables for a definition of the symbol referred to by UNDEF. *SYM is the symbol table entry containing the diff --git a/sysdeps/unix/sysv/linux/aarch64/bits/hwcap.h b/sysdeps/unix/sysv/linux/aarch64/bits/hwcap.h index 4ee14b4208..af90d8a626 100644 --- a/sysdeps/unix/sysv/linux/aarch64/bits/hwcap.h +++ b/sysdeps/unix/sysv/linux/aarch64/bits/hwcap.h @@ -72,3 +72,4 @@ #define HWCAP2_BF16 (1 << 14) #define HWCAP2_DGH (1 << 15) #define HWCAP2_RNG (1 << 16) +#define HWCAP2_BTI (1 << 17) diff --git a/sysdeps/unix/sysv/linux/aarch64/bits/mman.h b/sysdeps/unix/sysv/linux/aarch64/bits/mman.h new file mode 100644 index 0000000000..ecae046344 --- /dev/null +++ b/sysdeps/unix/sysv/linux/aarch64/bits/mman.h @@ -0,0 +1,31 @@ +/* Definitions for POSIX memory map interface. Linux/AArch64 version. + Copyright (C) 2020 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#ifndef _SYS_MMAN_H +# error "Never use directly; include instead." +#endif + +/* AArch64 specific definitions, should be in sync with + arch/arm64/include/uapi/asm/mman.h. */ + +#define PROT_BTI 0x10 + +#include + +/* Include generic Linux declarations. */ +#include diff --git a/sysdeps/unix/sysv/linux/aarch64/cpu-features.c b/sysdeps/unix/sysv/linux/aarch64/cpu-features.c index 896c588fee..b9ab827aca 100644 --- a/sysdeps/unix/sysv/linux/aarch64/cpu-features.c +++ b/sysdeps/unix/sysv/linux/aarch64/cpu-features.c @@ -83,4 +83,7 @@ init_cpu_features (struct cpu_features *cpu_features) if ((dczid & DCZID_DZP_MASK) == 0) cpu_features->zva_size = 4 << (dczid & DCZID_BS_MASK); + + /* Check if BTI is supported. */ + cpu_features->bti = GLRO (dl_hwcap2) & HWCAP2_BTI; } diff --git a/sysdeps/unix/sysv/linux/aarch64/cpu-features.h b/sysdeps/unix/sysv/linux/aarch64/cpu-features.h index 1389cea1b3..a81f186ec2 100644 --- a/sysdeps/unix/sysv/linux/aarch64/cpu-features.h +++ b/sysdeps/unix/sysv/linux/aarch64/cpu-features.h @@ -20,6 +20,7 @@ #define _CPU_FEATURES_AARCH64_H #include +#include #define MIDR_PARTNUM_SHIFT 4 #define MIDR_PARTNUM_MASK (0xfff << MIDR_PARTNUM_SHIFT) @@ -64,6 +65,7 @@ struct cpu_features { uint64_t midr_el1; unsigned zva_size; + bool bti; }; #endif /* _CPU_FEATURES_AARCH64_H */ diff --git a/sysdeps/x86/dl-prop.h b/sysdeps/x86/dl-prop.h index 516f88ea80..4a8ebc573e 100644 --- a/sysdeps/x86/dl-prop.h +++ b/sysdeps/x86/dl-prop.h @@ -191,4 +191,11 @@ _rtld_process_pt_note (struct link_map *l, const ElfW(Phdr) *ph) return 0; } +static inline int __attribute__ ((always_inline)) +_dl_process_gnu_property (struct link_map *l, uint32_t type, uint32_t datasz, + void *data) +{ + return 0; +} + #endif /* _DL_PROP_H */ -- 2.17.1