4 * Copyright (C) 1997 Richard Günther
6 * binfmt_misc detects binaries via a magic or filename extension and invokes
7 * a specified wrapper. This should obsolete binfmt_java, binfmt_em86 and
10 * 1997-04-25 first version
13 * 1997-06-26 hpa: pass the real filename rather than argv[0]
14 * 1997-06-30 minor cleanup
15 * 1997-08-09 removed extension stripping, locking cleanup
16 * 2001-02-28 AV: rewritten into something that resembles C. Original didn't.
19 #include <linux/module.h>
20 #include <linux/init.h>
22 #include <linux/binfmts.h>
23 #include <linux/slab.h>
24 #include <linux/ctype.h>
25 #include <linux/file.h>
26 #include <linux/pagemap.h>
27 #include <linux/namei.h>
28 #include <linux/mount.h>
29 #include <linux/syscalls.h>
31 #include <asm/uaccess.h>
34 VERBOSE_STATUS
= 1 /* make it zero to save 400 bytes kernel memory */
37 static LIST_HEAD(entries
);
38 static int enabled
= 1;
40 enum {Enabled
, Magic
};
41 #define MISC_FMT_PRESERVE_ARGV0 (1<<31)
42 #define MISC_FMT_OPEN_BINARY (1<<30)
43 #define MISC_FMT_CREDENTIALS (1<<29)
46 struct list_head list
;
47 unsigned long flags
; /* type, status, etc. */
48 int offset
; /* offset of magic */
49 int size
; /* size of magic/mask */
50 char *magic
; /* magic or filename extension */
51 char *mask
; /* mask, NULL for exact match */
52 char *interpreter
; /* filename of interpreter */
54 struct dentry
*dentry
;
57 static DEFINE_RWLOCK(entries_lock
);
58 static struct file_system_type bm_fs_type
;
59 static struct vfsmount
*bm_mnt
;
60 static int entry_count
;
63 * Check if we support the binfmt
64 * if we do, return the node, else NULL
65 * locking is done in load_misc_binary
67 static Node
*check_file(struct linux_binprm
*bprm
)
69 char *p
= strrchr(bprm
->interp
, '.');
72 list_for_each(l
, &entries
) {
73 Node
*e
= list_entry(l
, Node
, list
);
77 if (!test_bit(Enabled
, &e
->flags
))
80 if (!test_bit(Magic
, &e
->flags
)) {
81 if (p
&& !strcmp(e
->magic
, p
+ 1))
86 s
= bprm
->buf
+ e
->offset
;
88 for (j
= 0; j
< e
->size
; j
++)
89 if ((*s
++ ^ e
->magic
[j
]) & e
->mask
[j
])
92 for (j
= 0; j
< e
->size
; j
++)
93 if ((*s
++ ^ e
->magic
[j
]))
105 static int load_misc_binary(struct linux_binprm
*bprm
, struct pt_regs
*regs
)
108 struct file
* interp_file
= NULL
;
109 char iname
[BINPRM_BUF_SIZE
];
110 char *iname_addr
= iname
;
113 struct files_struct
*files
= NULL
;
119 /* to keep locking time low, we copy the interpreter string */
120 read_lock(&entries_lock
);
121 fmt
= check_file(bprm
);
123 strlcpy(iname
, fmt
->interpreter
, BINPRM_BUF_SIZE
);
124 read_unlock(&entries_lock
);
128 if (!(fmt
->flags
& MISC_FMT_PRESERVE_ARGV0
)) {
129 remove_arg_zero(bprm
);
132 if (fmt
->flags
& MISC_FMT_OPEN_BINARY
) {
134 files
= current
->files
;
135 retval
= unshare_files();
138 if (files
== current
->files
) {
139 put_files_struct(files
);
142 /* if the binary should be opened on behalf of the
143 * interpreter than keep it open and assign descriptor
145 fd_binary
= get_unused_fd();
150 fd_install(fd_binary
, bprm
->file
);
152 /* if the binary is not readable than enforce mm->dumpable=0
153 regardless of the interpreter's permissions */
154 if (file_permission(bprm
->file
, MAY_READ
))
155 bprm
->interp_flags
|= BINPRM_FLAGS_ENFORCE_NONDUMP
;
157 allow_write_access(bprm
->file
);
160 /* mark the bprm that fd should be passed to interp */
161 bprm
->interp_flags
|= BINPRM_FLAGS_EXECFD
;
162 bprm
->interp_data
= fd_binary
;
165 allow_write_access(bprm
->file
);
169 /* make argv[1] be the path to the binary */
170 retval
= copy_strings_kernel (1, &bprm
->interp
, bprm
);
175 /* add the interp as argv[0] */
176 retval
= copy_strings_kernel (1, &iname_addr
, bprm
);
181 bprm
->interp
= iname
; /* for binfmt_script */
183 interp_file
= open_exec (iname
);
184 retval
= PTR_ERR (interp_file
);
185 if (IS_ERR (interp_file
))
188 bprm
->file
= interp_file
;
189 if (fmt
->flags
& MISC_FMT_CREDENTIALS
) {
191 * No need to call prepare_binprm(), it's already been
192 * done. bprm->buf is stale, update from interp_file.
194 memset(bprm
->buf
, 0, BINPRM_BUF_SIZE
);
195 retval
= kernel_read(bprm
->file
, 0, bprm
->buf
, BINPRM_BUF_SIZE
);
197 retval
= prepare_binprm (bprm
);
202 retval
= search_binary_handler (bprm
, regs
);
207 put_files_struct(files
);
214 sys_close(fd_binary
);
215 bprm
->interp_flags
= 0;
216 bprm
->interp_data
= 0;
219 reset_files_struct(current
, files
);
223 /* Command parsers */
226 * parses and copies one argument enclosed in del from *sp to *dp,
227 * recognising the \x special.
228 * returns pointer to the copied argument or NULL in case of an
229 * error (and sets err) or null argument length.
231 static char *scanarg(char *s
, char del
)
235 while ((c
= *s
++) != del
) {
236 if (c
== '\\' && *s
== 'x') {
247 static int unquote(char *from
)
249 char c
= 0, *s
= from
, *p
= from
;
251 while ((c
= *s
++) != '\0') {
252 if (c
== '\\' && *s
== 'x') {
255 *p
= (c
- (isdigit(c
) ? '0' : 'A' - 10)) << 4;
257 *p
++ |= c
- (isdigit(c
) ? '0' : 'A' - 10);
265 static char * check_special_flags (char * sfs
, Node
* e
)
275 e
->flags
|= MISC_FMT_PRESERVE_ARGV0
;
279 e
->flags
|= MISC_FMT_OPEN_BINARY
;
283 /* this flags also implies the
285 e
->flags
|= (MISC_FMT_CREDENTIALS
|
286 MISC_FMT_OPEN_BINARY
);
296 * This registers a new binary format, it recognises the syntax
297 * ':name:type:offset:magic:mask:interpreter:flags'
298 * where the ':' is the IFS, that can be chosen with the first char
300 static Node
*create_entry(const char __user
*buffer
, size_t count
)
307 /* some sanity checks */
309 if ((count
< 11) || (count
> 256))
313 memsize
= sizeof(Node
) + count
+ 8;
314 e
= kmalloc(memsize
, GFP_USER
);
318 p
= buf
= (char *)e
+ sizeof(Node
);
320 memset(e
, 0, sizeof(Node
));
321 if (copy_from_user(buf
, buffer
, count
))
324 del
= *p
++; /* delimeter */
326 memset(buf
+count
, del
, 8);
334 !strcmp(e
->name
, ".") ||
335 !strcmp(e
->name
, "..") ||
336 strchr(e
->name
, '/'))
339 case 'E': e
->flags
= 1<<Enabled
; break;
340 case 'M': e
->flags
= (1<<Enabled
) | (1<<Magic
); break;
341 default: goto Einval
;
345 if (test_bit(Magic
, &e
->flags
)) {
346 char *s
= strchr(p
, del
);
350 e
->offset
= simple_strtoul(p
, &p
, 10);
367 e
->size
= unquote(e
->magic
);
368 if (e
->mask
&& unquote(e
->mask
) != e
->size
)
370 if (e
->size
+ e
->offset
> BINPRM_BUF_SIZE
)
382 if (!e
->magic
[0] || strchr(e
->magic
, '/'))
394 if (!e
->interpreter
[0])
398 p
= check_special_flags (p
, e
);
402 if (p
!= buf
+ count
)
411 return ERR_PTR(-EFAULT
);
414 return ERR_PTR(-EINVAL
);
418 * Set status of entry/binfmt_misc:
419 * '1' enables, '0' disables and '-1' clears entry/binfmt_misc
421 static int parse_command(const char __user
*buffer
, size_t count
)
429 if (copy_from_user(s
, buffer
, count
))
431 if (s
[count
-1] == '\n')
433 if (count
== 1 && s
[0] == '0')
435 if (count
== 1 && s
[0] == '1')
437 if (count
== 2 && s
[0] == '-' && s
[1] == '1')
444 static void entry_status(Node
*e
, char *page
)
447 char *status
= "disabled";
448 const char * flags
= "flags: ";
450 if (test_bit(Enabled
, &e
->flags
))
453 if (!VERBOSE_STATUS
) {
454 sprintf(page
, "%s\n", status
);
458 sprintf(page
, "%s\ninterpreter %s\n", status
, e
->interpreter
);
459 dp
= page
+ strlen(page
);
461 /* print the special flags */
462 sprintf (dp
, "%s", flags
);
463 dp
+= strlen (flags
);
464 if (e
->flags
& MISC_FMT_PRESERVE_ARGV0
) {
467 if (e
->flags
& MISC_FMT_OPEN_BINARY
) {
470 if (e
->flags
& MISC_FMT_CREDENTIALS
) {
476 if (!test_bit(Magic
, &e
->flags
)) {
477 sprintf(dp
, "extension .%s\n", e
->magic
);
481 sprintf(dp
, "offset %i\nmagic ", e
->offset
);
482 dp
= page
+ strlen(page
);
483 for (i
= 0; i
< e
->size
; i
++) {
484 sprintf(dp
, "%02x", 0xff & (int) (e
->magic
[i
]));
488 sprintf(dp
, "\nmask ");
490 for (i
= 0; i
< e
->size
; i
++) {
491 sprintf(dp
, "%02x", 0xff & (int) (e
->mask
[i
]));
500 static struct inode
*bm_get_inode(struct super_block
*sb
, int mode
)
502 struct inode
* inode
= new_inode(sb
);
505 inode
->i_mode
= mode
;
509 inode
->i_atime
= inode
->i_mtime
= inode
->i_ctime
=
510 current_fs_time(inode
->i_sb
);
515 static void bm_clear_inode(struct inode
*inode
)
517 kfree(inode
->i_private
);
520 static void kill_node(Node
*e
)
522 struct dentry
*dentry
;
524 write_lock(&entries_lock
);
527 list_del_init(&e
->list
);
530 write_unlock(&entries_lock
);
533 dentry
->d_inode
->i_nlink
--;
536 simple_release_fs(&bm_mnt
, &entry_count
);
543 bm_entry_read(struct file
* file
, char __user
* buf
, size_t nbytes
, loff_t
*ppos
)
545 Node
*e
= file
->f_path
.dentry
->d_inode
->i_private
;
551 if (!(page
= (char*) __get_free_page(GFP_KERNEL
)))
554 entry_status(e
, page
);
563 if (len
< pos
+ nbytes
)
566 if (copy_to_user(buf
, page
+ pos
, nbytes
))
568 *ppos
= pos
+ nbytes
;
571 free_page((unsigned long) page
);
575 static ssize_t
bm_entry_write(struct file
*file
, const char __user
*buffer
,
576 size_t count
, loff_t
*ppos
)
579 Node
*e
= file
->f_path
.dentry
->d_inode
->i_private
;
580 int res
= parse_command(buffer
, count
);
583 case 1: clear_bit(Enabled
, &e
->flags
);
585 case 2: set_bit(Enabled
, &e
->flags
);
587 case 3: root
= dget(file
->f_path
.mnt
->mnt_sb
->s_root
);
588 mutex_lock(&root
->d_inode
->i_mutex
);
592 mutex_unlock(&root
->d_inode
->i_mutex
);
600 static const struct file_operations bm_entry_operations
= {
601 .read
= bm_entry_read
,
602 .write
= bm_entry_write
,
607 static ssize_t
bm_register_write(struct file
*file
, const char __user
*buffer
,
608 size_t count
, loff_t
*ppos
)
612 struct dentry
*root
, *dentry
;
613 struct super_block
*sb
= file
->f_path
.mnt
->mnt_sb
;
616 e
= create_entry(buffer
, count
);
621 root
= dget(sb
->s_root
);
622 mutex_lock(&root
->d_inode
->i_mutex
);
623 dentry
= lookup_one_len(e
->name
, root
, strlen(e
->name
));
624 err
= PTR_ERR(dentry
);
632 inode
= bm_get_inode(sb
, S_IFREG
| 0644);
638 err
= simple_pin_fs(&bm_fs_type
, &bm_mnt
, &entry_count
);
645 e
->dentry
= dget(dentry
);
646 inode
->i_private
= e
;
647 inode
->i_fop
= &bm_entry_operations
;
649 d_instantiate(dentry
, inode
);
650 write_lock(&entries_lock
);
651 list_add(&e
->list
, &entries
);
652 write_unlock(&entries_lock
);
658 mutex_unlock(&root
->d_inode
->i_mutex
);
668 static const struct file_operations bm_register_operations
= {
669 .write
= bm_register_write
,
675 bm_status_read(struct file
*file
, char __user
*buf
, size_t nbytes
, loff_t
*ppos
)
677 char *s
= enabled
? "enabled" : "disabled";
685 if (len
< pos
+ nbytes
)
687 if (copy_to_user(buf
, s
+ pos
, nbytes
))
689 *ppos
= pos
+ nbytes
;
693 static ssize_t
bm_status_write(struct file
* file
, const char __user
* buffer
,
694 size_t count
, loff_t
*ppos
)
696 int res
= parse_command(buffer
, count
);
700 case 1: enabled
= 0; break;
701 case 2: enabled
= 1; break;
702 case 3: root
= dget(file
->f_path
.mnt
->mnt_sb
->s_root
);
703 mutex_lock(&root
->d_inode
->i_mutex
);
705 while (!list_empty(&entries
))
706 kill_node(list_entry(entries
.next
, Node
, list
));
708 mutex_unlock(&root
->d_inode
->i_mutex
);
715 static const struct file_operations bm_status_operations
= {
716 .read
= bm_status_read
,
717 .write
= bm_status_write
,
720 /* Superblock handling */
722 static const struct super_operations s_ops
= {
723 .statfs
= simple_statfs
,
724 .clear_inode
= bm_clear_inode
,
727 static int bm_fill_super(struct super_block
* sb
, void * data
, int silent
)
729 static struct tree_descr bm_files
[] = {
730 [1] = {"status", &bm_status_operations
, S_IWUSR
|S_IRUGO
},
731 [2] = {"register", &bm_register_operations
, S_IWUSR
},
734 int err
= simple_fill_super(sb
, 0x42494e4d, bm_files
);
740 static int bm_get_sb(struct file_system_type
*fs_type
,
741 int flags
, const char *dev_name
, void *data
, struct vfsmount
*mnt
)
743 return get_sb_single(fs_type
, flags
, data
, bm_fill_super
, mnt
);
746 static struct linux_binfmt misc_format
= {
747 .module
= THIS_MODULE
,
748 .load_binary
= load_misc_binary
,
751 static struct file_system_type bm_fs_type
= {
752 .owner
= THIS_MODULE
,
753 .name
= "binfmt_misc",
755 .kill_sb
= kill_litter_super
,
758 static int __init
init_misc_binfmt(void)
760 int err
= register_filesystem(&bm_fs_type
);
762 err
= register_binfmt(&misc_format
);
764 unregister_filesystem(&bm_fs_type
);
769 static void __exit
exit_misc_binfmt(void)
771 unregister_binfmt(&misc_format
);
772 unregister_filesystem(&bm_fs_type
);
775 core_initcall(init_misc_binfmt
);
776 module_exit(exit_misc_binfmt
);
777 MODULE_LICENSE("GPL");