mirror of
				https://github.com/qemu/qemu.git
				synced 2025-10-30 19:15:42 +00:00 
			
		
		
		
	 d8fcdad2d6
			
		
	
	
		d8fcdad2d6
		
	
	
	
	
		
			
			Signed-off-by: Warner Losh <imp@bsdimp.com> Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
		
			
				
	
	
		
			215 lines
		
	
	
		
			5.3 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			215 lines
		
	
	
		
			5.3 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  *  Load BSD executables.
 | |
|  *
 | |
|  *  This program is free software; you can redistribute it and/or modify
 | |
|  *  it under the terms of the GNU General Public License as published by
 | |
|  *  the Free Software Foundation; either version 2 of the License, or
 | |
|  *  (at your option) any later version.
 | |
|  *
 | |
|  *  This program is distributed in the hope that it will be useful,
 | |
|  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
|  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
|  *  GNU General Public License for more details.
 | |
|  *
 | |
|  *  You should have received a copy of the GNU General Public License
 | |
|  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
 | |
|  */
 | |
| 
 | |
| #include "qemu/osdep.h"
 | |
| 
 | |
| #include "qemu.h"
 | |
| 
 | |
| /* ??? This should really be somewhere else.  */
 | |
| abi_long memcpy_to_target(abi_ulong dest, const void *src,
 | |
|                           unsigned long len)
 | |
| {
 | |
|     void *host_ptr;
 | |
| 
 | |
|     host_ptr = lock_user(VERIFY_WRITE, dest, len, 0);
 | |
|     if (!host_ptr) {
 | |
|         return -TARGET_EFAULT;
 | |
|     }
 | |
|     memcpy(host_ptr, src, len);
 | |
|     unlock_user(host_ptr, dest, 1);
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| static int count(char **vec)
 | |
| {
 | |
|     int         i;
 | |
| 
 | |
|     for (i = 0; *vec; i++) {
 | |
|         vec++;
 | |
|     }
 | |
| 
 | |
|     return i;
 | |
| }
 | |
| 
 | |
| static int prepare_binprm(struct bsd_binprm *bprm)
 | |
| {
 | |
|     struct stat         st;
 | |
|     int mode;
 | |
|     int retval;
 | |
| 
 | |
|     if (fstat(bprm->fd, &st) < 0) {
 | |
|         return -errno;
 | |
|     }
 | |
| 
 | |
|     mode = st.st_mode;
 | |
|     if (!S_ISREG(mode)) {        /* Must be regular file */
 | |
|         return -EACCES;
 | |
|     }
 | |
|     if (!(mode & 0111)) {        /* Must have at least one execute bit set */
 | |
|         return -EACCES;
 | |
|     }
 | |
| 
 | |
|     bprm->e_uid = geteuid();
 | |
|     bprm->e_gid = getegid();
 | |
| 
 | |
|     /* Set-uid? */
 | |
|     if (mode & S_ISUID) {
 | |
|         bprm->e_uid = st.st_uid;
 | |
|     }
 | |
| 
 | |
|     /* Set-gid? */
 | |
|     /*
 | |
|      * If setgid is set but no group execute bit then this
 | |
|      * is a candidate for mandatory locking, not a setgid
 | |
|      * executable.
 | |
|      */
 | |
|     if ((mode & (S_ISGID | S_IXGRP)) == (S_ISGID | S_IXGRP)) {
 | |
|         bprm->e_gid = st.st_gid;
 | |
|     }
 | |
| 
 | |
|     memset(bprm->buf, 0, sizeof(bprm->buf));
 | |
|     retval = lseek(bprm->fd, 0L, SEEK_SET);
 | |
|     if (retval >= 0) {
 | |
|         retval = read(bprm->fd, bprm->buf, 128);
 | |
|     }
 | |
|     if (retval < 0) {
 | |
|         perror("prepare_binprm");
 | |
|         exit(-1);
 | |
|     } else {
 | |
|         return retval;
 | |
|     }
 | |
| }
 | |
| 
 | |
| /* Construct the envp and argv tables on the target stack.  */
 | |
| abi_ulong loader_build_argptr(int envc, int argc, abi_ulong sp,
 | |
|                               abi_ulong stringp)
 | |
| {
 | |
|     int n = sizeof(abi_ulong);
 | |
|     abi_ulong envp;
 | |
|     abi_ulong argv;
 | |
| 
 | |
|     sp -= (envc + 1) * n;
 | |
|     envp = sp;
 | |
|     sp -= (argc + 1) * n;
 | |
|     argv = sp;
 | |
|     sp -= n;
 | |
|     /* FIXME - handle put_user() failures */
 | |
|     put_user_ual(argc, sp);
 | |
| 
 | |
|     while (argc-- > 0) {
 | |
|         /* FIXME - handle put_user() failures */
 | |
|         put_user_ual(stringp, argv);
 | |
|         argv += n;
 | |
|         stringp += target_strlen(stringp) + 1;
 | |
|     }
 | |
|     /* FIXME - handle put_user() failures */
 | |
|     put_user_ual(0, argv);
 | |
|     while (envc-- > 0) {
 | |
|         /* FIXME - handle put_user() failures */
 | |
|         put_user_ual(stringp, envp);
 | |
|         envp += n;
 | |
|         stringp += target_strlen(stringp) + 1;
 | |
|     }
 | |
|     /* FIXME - handle put_user() failures */
 | |
|     put_user_ual(0, envp);
 | |
| 
 | |
|     return sp;
 | |
| }
 | |
| 
 | |
| static bool is_there(const char *candidate)
 | |
| {
 | |
|     struct stat fin;
 | |
| 
 | |
|     /* XXX work around access(2) false positives for superuser */
 | |
|     if (access(candidate, X_OK) == 0 && stat(candidate, &fin) == 0 &&
 | |
|             S_ISREG(fin.st_mode) && (getuid() != 0 ||
 | |
|                 (fin.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH)) != 0)) {
 | |
|         return true;
 | |
|     }
 | |
| 
 | |
|     return false;
 | |
| }
 | |
| 
 | |
| int loader_exec(const char *filename, char **argv, char **envp,
 | |
|                 struct target_pt_regs *regs, struct image_info *infop,
 | |
|                 struct bsd_binprm *bprm)
 | |
| {
 | |
|     char *path, fullpath[PATH_MAX];
 | |
|     int retval, i;
 | |
| 
 | |
|     bprm->p = TARGET_PAGE_SIZE * MAX_ARG_PAGES;
 | |
|     for (i = 0; i < MAX_ARG_PAGES; i++) {       /* clear page-table */
 | |
|         bprm->page[i] = NULL;
 | |
|     }
 | |
| 
 | |
|     if (strchr(filename, '/') != NULL) {
 | |
|         path = realpath(filename, fullpath);
 | |
|         if (path == NULL) {
 | |
|             /* Failed to resolve. */
 | |
|             return -1;
 | |
|         }
 | |
|         if (!is_there(path)) {
 | |
|             return -1;
 | |
|         }
 | |
|     } else {
 | |
|         path = g_find_program_in_path(filename);
 | |
|         if (path == NULL) {
 | |
|             return -1;
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     retval = open(path, O_RDONLY);
 | |
|     if (retval < 0) {
 | |
|         g_free(path);
 | |
|         return retval;
 | |
|     }
 | |
| 
 | |
|     bprm->fullpath = path;
 | |
|     bprm->fd = retval;
 | |
|     bprm->filename = (char *)filename;
 | |
|     bprm->argc = count(argv);
 | |
|     bprm->argv = argv;
 | |
|     bprm->envc = count(envp);
 | |
|     bprm->envp = envp;
 | |
| 
 | |
|     retval = prepare_binprm(bprm);
 | |
| 
 | |
|     if (retval >= 0) {
 | |
|         if (bprm->buf[0] == 0x7f
 | |
|                 && bprm->buf[1] == 'E'
 | |
|                 && bprm->buf[2] == 'L'
 | |
|                 && bprm->buf[3] == 'F') {
 | |
|             retval = load_elf_binary(bprm, regs, infop);
 | |
|         } else {
 | |
|             fprintf(stderr, "Unknown binary format\n");
 | |
|             return -1;
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     if (retval >= 0) {
 | |
|         /* success.  Initialize important registers */
 | |
|         do_init_thread(regs, infop);
 | |
|         return retval;
 | |
|     }
 | |
| 
 | |
|     /* Something went wrong, return the inode and free the argument pages*/
 | |
|     for (i = 0 ; i < MAX_ARG_PAGES ; i++) {
 | |
|         g_free(bprm->page[i]);
 | |
|     }
 | |
|     return retval;
 | |
| }
 |