20 #include "pthread_impl.h"
23 #include "malloc_impl.h"
25 static void error(const char *, ...);
27 #define MAXP2(a,b) (-(-(a)&-(b)))
28 #define ALIGN(x,y) ((x)+(y)-1 & -(y))
40 struct td_index
*next
;
45 struct fdpic_loadmap
*loadmap
;
51 struct dso
*next
, *prev
;
61 struct dso
*syms_next
, *lazy_next
;
62 size_t *lazy
, lazy_cnt
;
70 struct dso
**deps
, *needed_by
;
71 char *rpath_orig
, *rpath
;
72 struct tls_module tls
;
74 size_t relro_start
, relro_end
;
76 unsigned char *new_tls
;
77 volatile int new_dtv_idx
, new_tls_idx
;
78 struct td_index
*td_index
;
79 struct dso
*fini_next
;
84 struct fdpic_loadmap
*loadmap
;
99 void __init_libc(char **, char *);
101 static struct builtin_tls
{
106 #define MIN_TLS_ALIGN offsetof(struct builtin_tls, pt)
108 #define ADDEND_LIMIT 4096
109 static size_t *saved_addends
, *apply_addends_to
;
111 static struct dso ldso
;
112 static struct dso
*head
, *tail
, *fini_head
, *syms_tail
, *lazy_head
;
113 static char *env_path
, *sys_path
;
114 static unsigned long long gencnt
;
117 static int ldso_fail
;
119 static jmp_buf *rtld_fail
;
120 static pthread_rwlock_t lock
;
121 static struct debug debug
;
122 static struct tls_module
*tls_tail
;
123 static size_t tls_cnt
, tls_offset
, tls_align
= MIN_TLS_ALIGN
;
124 static size_t static_tls_cnt
;
125 static pthread_mutex_t init_fini_lock
= { ._m_type
= PTHREAD_MUTEX_RECURSIVE
};
126 static struct fdpic_loadmap
*app_loadmap
;
127 static struct fdpic_dummy_loadmap app_dummy_loadmap
;
128 static struct dso
*const nodeps_dummy
;
130 struct debug
*_dl_debug_addr
= &debug
;
132 extern hidden
int __malloc_replaced
;
134 hidden
void (*const __init_array_start
)(void)=0, (*const __fini_array_start
)(void)=0;
136 extern hidden
void (*const __init_array_end
)(void), (*const __fini_array_end
)(void);
138 weak_alias(__init_array_start
, __init_array_end
);
139 weak_alias(__fini_array_start
, __fini_array_end
);
141 static int dl_strcmp(const char *l
, const char *r
)
143 for (; *l
==*r
&& *l
; l
++, r
++);
144 return *(unsigned char *)l
- *(unsigned char *)r
;
146 #define strcmp(l,r) dl_strcmp(l,r)
148 /* Compute load address for a virtual address in a given dso. */
150 static void *laddr(const struct dso
*p
, size_t v
)
153 if (!p
->loadmap
) return p
->base
+ v
;
154 for (j
=0; v
-p
->loadmap
->segs
[j
].p_vaddr
>= p
->loadmap
->segs
[j
].p_memsz
; j
++);
155 return (void *)(v
- p
->loadmap
->segs
[j
].p_vaddr
+ p
->loadmap
->segs
[j
].addr
);
157 static void *laddr_pg(const struct dso
*p
, size_t v
)
160 size_t pgsz
= PAGE_SIZE
;
161 if (!p
->loadmap
) return p
->base
+ v
;
163 size_t a
= p
->loadmap
->segs
[j
].p_vaddr
;
164 size_t b
= a
+ p
->loadmap
->segs
[j
].p_memsz
;
170 return (void *)(v
- p
->loadmap
->segs
[j
].p_vaddr
+ p
->loadmap
->segs
[j
].addr
);
172 #define fpaddr(p, v) ((void (*)())&(struct funcdesc){ \
173 laddr(p, v), (p)->got })
175 #define laddr(p, v) (void *)((p)->base + (v))
176 #define laddr_pg(p, v) laddr(p, v)
177 #define fpaddr(p, v) ((void (*)())laddr(p, v))
180 static void decode_vec(size_t *v
, size_t *a
, size_t cnt
)
183 for (i
=0; i
<cnt
; i
++) a
[i
] = 0;
184 for (; v
[0]; v
+=2) if (v
[0]-1<cnt
-1) {
190 static int search_vec(size_t *v
, size_t *r
, size_t key
)
192 for (; v
[0]!=key
; v
+=2)
198 static uint32_t sysv_hash(const char *s0
)
200 const unsigned char *s
= (void *)s0
;
206 return h
& 0xfffffff;
209 static uint32_t gnu_hash(const char *s0
)
211 const unsigned char *s
= (void *)s0
;
212 uint_fast32_t h
= 5381;
218 static Sym
*sysv_lookup(const char *s
, uint32_t h
, struct dso
*dso
)
221 Sym
*syms
= dso
->syms
;
222 Elf_Symndx
*hashtab
= dso
->hashtab
;
223 char *strings
= dso
->strings
;
224 for (i
=hashtab
[2+h
%hashtab
[0]]; i
; i
=hashtab
[2+hashtab
[0]+i
]) {
225 if ((!dso
->versym
|| dso
->versym
[i
] >= 0)
226 && (!strcmp(s
, strings
+syms
[i
].st_name
)))
232 static Sym
*gnu_lookup(uint32_t h1
, uint32_t *hashtab
, struct dso
*dso
, const char *s
)
234 uint32_t nbuckets
= hashtab
[0];
235 uint32_t *buckets
= hashtab
+ 4 + hashtab
[2]*(sizeof(size_t)/4);
236 uint32_t i
= buckets
[h1
% nbuckets
];
240 uint32_t *hashval
= buckets
+ nbuckets
+ (i
- hashtab
[1]);
242 for (h1
|= 1; ; i
++) {
243 uint32_t h2
= *hashval
++;
244 if ((h1
== (h2
|1)) && (!dso
->versym
|| dso
->versym
[i
] >= 0)
245 && !strcmp(s
, dso
->strings
+ dso
->syms
[i
].st_name
))
253 static Sym
*gnu_lookup_filtered(uint32_t h1
, uint32_t *hashtab
, struct dso
*dso
, const char *s
, uint32_t fofs
, size_t fmask
)
255 const size_t *bloomwords
= (const void *)(hashtab
+4);
256 size_t f
= bloomwords
[fofs
& (hashtab
[2]-1)];
257 if (!(f
& fmask
)) return 0;
259 f
>>= (h1
>> hashtab
[3]) % (8 * sizeof f
);
260 if (!(f
& 1)) return 0;
262 return gnu_lookup(h1
, hashtab
, dso
, s
);
265 #define OK_TYPES (1<<STT_NOTYPE | 1<<STT_OBJECT | 1<<STT_FUNC | 1<<STT_COMMON | 1<<STT_TLS)
266 #define OK_BINDS (1<<STB_GLOBAL | 1<<STB_WEAK | 1<<STB_GNU_UNIQUE)
268 #ifndef ARCH_SYM_REJECT_UND
269 #define ARCH_SYM_REJECT_UND(s) 0
272 static struct symdef
find_sym(struct dso
*dso
, const char *s
, int need_def
)
274 uint32_t h
= 0, gh
= gnu_hash(s
), gho
= gh
/ (8*sizeof(size_t)), *ght
;
275 size_t ghm
= 1ul << gh
% (8*sizeof(size_t));
276 struct symdef def
= {0};
277 for (; dso
; dso
=dso
->syms_next
) {
279 if ((ght
= dso
->ghashtab
)) {
280 sym
= gnu_lookup_filtered(gh
, ght
, dso
, s
, gho
, ghm
);
282 if (!h
) h
= sysv_hash(s
);
283 sym
= sysv_lookup(s
, h
, dso
);
287 if (need_def
|| (sym
->st_info
&0xf) == STT_TLS
288 || ARCH_SYM_REJECT_UND(sym
))
291 if ((sym
->st_info
&0xf) != STT_TLS
)
293 if (!(1<<(sym
->st_info
&0xf) & OK_TYPES
)) continue;
294 if (!(1<<(sym
->st_info
>>4) & OK_BINDS
)) continue;
302 static void do_relocs(struct dso
*dso
, size_t *rel
, size_t rel_size
, size_t stride
)
304 unsigned char *base
= dso
->base
;
305 Sym
*syms
= dso
->syms
;
306 char *strings
= dso
->strings
;
317 int skip_relative
= 0, reuse_addends
= 0, save_slot
= 0;
320 /* Only ldso's REL table needs addend saving/reuse. */
321 if (rel
== apply_addends_to
)
326 for (; rel_size
; rel
+=stride
, rel_size
-=stride
*sizeof(size_t)) {
327 if (skip_relative
&& IS_RELATIVE(rel
[1], dso
->syms
)) continue;
328 type
= R_TYPE(rel
[1]);
329 if (type
== REL_NONE
) continue;
330 reloc_addr
= laddr(dso
, rel
[0]);
334 } else if (type
==REL_GOT
|| type
==REL_PLT
|| type
==REL_COPY
) {
336 } else if (reuse_addends
) {
337 /* Save original addend in stage 2 where the dso
338 * chain consists of just ldso; otherwise read back
339 * saved addend since the inline one was clobbered. */
341 saved_addends
[save_slot
] = *reloc_addr
;
342 addend
= saved_addends
[save_slot
++];
344 addend
= *reloc_addr
;
347 sym_index
= R_SYM(rel
[1]);
349 sym
= syms
+ sym_index
;
350 name
= strings
+ sym
->st_name
;
351 ctx
= type
==REL_COPY
? head
->syms_next
: head
;
352 def
= (sym
->st_info
&0xf) == STT_SECTION
353 ? (struct symdef
){ .dso
= dso
, .sym
= sym
}
354 : find_sym(ctx
, name
, type
==REL_PLT
);
355 if (!def
.sym
&& (sym
->st_shndx
!= SHN_UNDEF
356 || sym
->st_info
>>4 != STB_WEAK
)) {
357 if (dso
->lazy
&& (type
==REL_PLT
|| type
==REL_GOT
)) {
358 dso
->lazy
[3*dso
->lazy_cnt
+0] = rel
[0];
359 dso
->lazy
[3*dso
->lazy_cnt
+1] = rel
[1];
360 dso
->lazy
[3*dso
->lazy_cnt
+2] = addend
;
364 error("Error relocating %s: %s: symbol not found",
366 if (runtime
) longjmp(*rtld_fail
, 1);
375 sym_val
= def
.sym
? (size_t)laddr(def
.dso
, def
.sym
->st_value
) : 0;
376 tls_val
= def
.sym
? def
.sym
->st_value
: 0;
378 if ((type
== REL_TPOFF
|| type
== REL_TPOFF_NEG
)
379 && runtime
&& def
.dso
->tls_id
> static_tls_cnt
) {
380 error("Error relocating %s: %s: initial-exec TLS "
381 "resolves to dynamic definition in %s",
382 dso
->name
, name
, def
.dso
->name
);
383 longjmp(*rtld_fail
, 1);
390 addend
-= (size_t)reloc_addr
;
394 *reloc_addr
= sym_val
+ addend
;
397 *reloc_addr
= (size_t)base
+ addend
;
400 if (sym
) *reloc_addr
= sym_val
+ addend
;
401 else *reloc_addr
= (size_t)base
+ addend
;
404 memcpy(reloc_addr
, (void *)sym_val
, sym
->st_size
);
407 *(uint32_t *)reloc_addr
= sym_val
+ addend
408 - (size_t)reloc_addr
;
411 *reloc_addr
= def
.sym
? (size_t)(def
.dso
->funcdescs
412 + (def
.sym
- def
.dso
->syms
)) : 0;
414 case REL_FUNCDESC_VAL
:
415 if ((sym
->st_info
&0xf) == STT_SECTION
) *reloc_addr
+= sym_val
;
416 else *reloc_addr
= sym_val
;
417 reloc_addr
[1] = def
.sym
? (size_t)def
.dso
->got
: 0;
420 *reloc_addr
= def
.dso
->tls_id
;
423 *reloc_addr
= tls_val
+ addend
- DTP_OFFSET
;
427 *reloc_addr
= tls_val
+ def
.dso
->tls
.offset
+ TPOFF_K
+ addend
;
431 *reloc_addr
= tls_val
- def
.dso
->tls
.offset
+ addend
;
434 *reloc_addr
= def
.dso
->tls
.offset
- tls_val
+ addend
;
438 if (stride
<3) addend
= reloc_addr
[1];
439 if (runtime
&& def
.dso
->tls_id
> static_tls_cnt
) {
440 struct td_index
*new = malloc(sizeof *new);
443 "Error relocating %s: cannot allocate TLSDESC for %s",
444 dso
->name
, sym
? name
: "(local)" );
445 longjmp(*rtld_fail
, 1);
447 new->next
= dso
->td_index
;
449 new->args
[0] = def
.dso
->tls_id
;
450 new->args
[1] = tls_val
+ addend
;
451 reloc_addr
[0] = (size_t)__tlsdesc_dynamic
;
452 reloc_addr
[1] = (size_t)new;
454 reloc_addr
[0] = (size_t)__tlsdesc_static
;
456 reloc_addr
[1] = tls_val
+ def
.dso
->tls
.offset
459 reloc_addr
[1] = tls_val
- def
.dso
->tls
.offset
465 error("Error relocating %s: unsupported relocation type %d",
467 if (runtime
) longjmp(*rtld_fail
, 1);
473 static void redo_lazy_relocs()
475 struct dso
*p
= lazy_head
, *next
;
479 size_t size
= p
->lazy_cnt
*3*sizeof(size_t);
481 do_relocs(p
, p
->lazy
, size
, 3);
483 p
->lazy_next
= lazy_head
;
493 /* A huge hack: to make up for the wastefulness of shared libraries
494 * needing at least a page of dirty memory even if they have no global
495 * data, we reclaim the gaps at the beginning and end of writable maps
496 * and "donate" them to the heap. */
498 static void reclaim(struct dso
*dso
, size_t start
, size_t end
)
500 if (start
>= dso
->relro_start
&& start
< dso
->relro_end
) start
= dso
->relro_end
;
501 if (end
>= dso
->relro_start
&& end
< dso
->relro_end
) end
= dso
->relro_start
;
502 if (start
>= end
) return;
503 char *base
= laddr_pg(dso
, start
);
504 __malloc_donate(base
, base
+(end
-start
));
507 static void reclaim_gaps(struct dso
*dso
)
509 Phdr
*ph
= dso
->phdr
;
510 size_t phcnt
= dso
->phnum
;
512 for (; phcnt
--; ph
=(void *)((char *)ph
+dso
->phentsize
)) {
513 if (ph
->p_type
!=PT_LOAD
) continue;
514 if ((ph
->p_flags
&(PF_R
|PF_W
))!=(PF_R
|PF_W
)) continue;
515 reclaim(dso
, ph
->p_vaddr
& -PAGE_SIZE
, ph
->p_vaddr
);
516 reclaim(dso
, ph
->p_vaddr
+ph
->p_memsz
,
517 ph
->p_vaddr
+ph
->p_memsz
+PAGE_SIZE
-1 & -PAGE_SIZE
);
521 static void *mmap_fixed(void *p
, size_t n
, int prot
, int flags
, int fd
, off_t off
)
523 static int no_map_fixed
;
526 q
= mmap(p
, n
, prot
, flags
|MAP_FIXED
, fd
, off
);
527 if (!DL_NOMMU_SUPPORT
|| q
!= MAP_FAILED
|| errno
!= EINVAL
)
531 /* Fallbacks for MAP_FIXED failure on NOMMU kernels. */
532 if (flags
& MAP_ANONYMOUS
) {
537 if (lseek(fd
, off
, SEEK_SET
) < 0) return MAP_FAILED
;
538 for (q
=p
; n
; q
+=r
, off
+=r
, n
-=r
) {
540 if (r
< 0 && errno
!= EINTR
) return MAP_FAILED
;
549 static void unmap_library(struct dso
*dso
)
553 for (i
=0; i
<dso
->loadmap
->nsegs
; i
++) {
554 if (!dso
->loadmap
->segs
[i
].p_memsz
)
556 munmap((void *)dso
->loadmap
->segs
[i
].addr
,
557 dso
->loadmap
->segs
[i
].p_memsz
);
560 } else if (dso
->map
&& dso
->map_len
) {
561 munmap(dso
->map
, dso
->map_len
);
565 static void *map_library(int fd
, struct dso
*dso
)
567 Ehdr buf
[(896+sizeof(Ehdr
))/sizeof(Ehdr
)];
568 void *allocated_buf
=0;
570 size_t addr_min
=SIZE_MAX
, addr_max
=0, map_len
;
571 size_t this_min
, this_max
;
577 unsigned char *map
=MAP_FAILED
, *base
;
582 ssize_t l
= read(fd
, buf
, sizeof buf
);
585 if (l
<sizeof *eh
|| (eh
->e_type
!= ET_DYN
&& eh
->e_type
!= ET_EXEC
))
587 phsize
= eh
->e_phentsize
* eh
->e_phnum
;
588 if (phsize
> sizeof buf
- sizeof *eh
) {
589 allocated_buf
= malloc(phsize
);
590 if (!allocated_buf
) return 0;
591 l
= pread(fd
, allocated_buf
, phsize
, eh
->e_phoff
);
592 if (l
< 0) goto error
;
593 if (l
!= phsize
) goto noexec
;
594 ph
= ph0
= allocated_buf
;
595 } else if (eh
->e_phoff
+ phsize
> l
) {
596 l
= pread(fd
, buf
+1, phsize
, eh
->e_phoff
);
597 if (l
< 0) goto error
;
598 if (l
!= phsize
) goto noexec
;
599 ph
= ph0
= (void *)(buf
+ 1);
601 ph
= ph0
= (void *)((char *)buf
+ eh
->e_phoff
);
603 for (i
=eh
->e_phnum
; i
; i
--, ph
=(void *)((char *)ph
+eh
->e_phentsize
)) {
604 if (ph
->p_type
== PT_DYNAMIC
) {
606 } else if (ph
->p_type
== PT_TLS
) {
607 tls_image
= ph
->p_vaddr
;
608 dso
->tls
.align
= ph
->p_align
;
609 dso
->tls
.len
= ph
->p_filesz
;
610 dso
->tls
.size
= ph
->p_memsz
;
611 } else if (ph
->p_type
== PT_GNU_RELRO
) {
612 dso
->relro_start
= ph
->p_vaddr
& -PAGE_SIZE
;
613 dso
->relro_end
= (ph
->p_vaddr
+ ph
->p_memsz
) & -PAGE_SIZE
;
615 if (ph
->p_type
!= PT_LOAD
) continue;
617 if (ph
->p_vaddr
< addr_min
) {
618 addr_min
= ph
->p_vaddr
;
619 off_start
= ph
->p_offset
;
620 prot
= (((ph
->p_flags
&PF_R
) ? PROT_READ
: 0) |
621 ((ph
->p_flags
&PF_W
) ? PROT_WRITE
: 0) |
622 ((ph
->p_flags
&PF_X
) ? PROT_EXEC
: 0));
624 if (ph
->p_vaddr
+ph
->p_memsz
> addr_max
) {
625 addr_max
= ph
->p_vaddr
+ph
->p_memsz
;
628 if (!dyn
) goto noexec
;
629 if (DL_FDPIC
&& !(eh
->e_flags
& FDPIC_CONSTDISP_FLAG
)) {
630 dso
->loadmap
= calloc(1, sizeof *dso
->loadmap
631 + nsegs
* sizeof *dso
->loadmap
->segs
);
632 if (!dso
->loadmap
) goto error
;
633 dso
->loadmap
->nsegs
= nsegs
;
634 for (ph
=ph0
, i
=0; i
<nsegs
; ph
=(void *)((char *)ph
+eh
->e_phentsize
)) {
635 if (ph
->p_type
!= PT_LOAD
) continue;
636 prot
= (((ph
->p_flags
&PF_R
) ? PROT_READ
: 0) |
637 ((ph
->p_flags
&PF_W
) ? PROT_WRITE
: 0) |
638 ((ph
->p_flags
&PF_X
) ? PROT_EXEC
: 0));
639 map
= mmap(0, ph
->p_memsz
+ (ph
->p_vaddr
& PAGE_SIZE
-1),
641 fd
, ph
->p_offset
& -PAGE_SIZE
);
642 if (map
== MAP_FAILED
) {
646 dso
->loadmap
->segs
[i
].addr
= (size_t)map
+
647 (ph
->p_vaddr
& PAGE_SIZE
-1);
648 dso
->loadmap
->segs
[i
].p_vaddr
= ph
->p_vaddr
;
649 dso
->loadmap
->segs
[i
].p_memsz
= ph
->p_memsz
;
651 if (prot
& PROT_WRITE
) {
652 size_t brk
= (ph
->p_vaddr
& PAGE_SIZE
-1)
654 size_t pgbrk
= brk
+ PAGE_SIZE
-1 & -PAGE_SIZE
;
655 size_t pgend
= brk
+ ph
->p_memsz
- ph
->p_filesz
656 + PAGE_SIZE
-1 & -PAGE_SIZE
;
657 if (pgend
> pgbrk
&& mmap_fixed(map
+pgbrk
,
659 MAP_PRIVATE
|MAP_FIXED
|MAP_ANONYMOUS
,
660 -1, off_start
) == MAP_FAILED
)
662 memset(map
+ brk
, 0, pgbrk
-brk
);
665 map
= (void *)dso
->loadmap
->segs
[0].addr
;
669 addr_max
+= PAGE_SIZE
-1;
670 addr_max
&= -PAGE_SIZE
;
671 addr_min
&= -PAGE_SIZE
;
672 off_start
&= -PAGE_SIZE
;
673 map_len
= addr_max
- addr_min
+ off_start
;
674 /* The first time, we map too much, possibly even more than
675 * the length of the file. This is okay because we will not
676 * use the invalid part; we just need to reserve the right
677 * amount of virtual address space to map over later. */
678 map
= DL_NOMMU_SUPPORT
679 ? mmap((void *)addr_min
, map_len
, PROT_READ
|PROT_WRITE
|PROT_EXEC
,
680 MAP_PRIVATE
|MAP_ANONYMOUS
, -1, 0)
681 : mmap((void *)addr_min
, map_len
, prot
,
682 MAP_PRIVATE
, fd
, off_start
);
683 if (map
==MAP_FAILED
) goto error
;
685 dso
->map_len
= map_len
;
686 /* If the loaded file is not relocatable and the requested address is
687 * not available, then the load operation must fail. */
688 if (eh
->e_type
!= ET_DYN
&& addr_min
&& map
!=(void *)addr_min
) {
692 base
= map
- addr_min
;
695 for (ph
=ph0
, i
=eh
->e_phnum
; i
; i
--, ph
=(void *)((char *)ph
+eh
->e_phentsize
)) {
696 if (ph
->p_type
!= PT_LOAD
) continue;
697 /* Check if the programs headers are in this load segment, and
698 * if so, record the address for use by dl_iterate_phdr. */
699 if (!dso
->phdr
&& eh
->e_phoff
>= ph
->p_offset
700 && eh
->e_phoff
+phsize
<= ph
->p_offset
+ph
->p_filesz
) {
701 dso
->phdr
= (void *)(base
+ ph
->p_vaddr
702 + (eh
->e_phoff
-ph
->p_offset
));
703 dso
->phnum
= eh
->e_phnum
;
704 dso
->phentsize
= eh
->e_phentsize
;
706 this_min
= ph
->p_vaddr
& -PAGE_SIZE
;
707 this_max
= ph
->p_vaddr
+ph
->p_memsz
+PAGE_SIZE
-1 & -PAGE_SIZE
;
708 off_start
= ph
->p_offset
& -PAGE_SIZE
;
709 prot
= (((ph
->p_flags
&PF_R
) ? PROT_READ
: 0) |
710 ((ph
->p_flags
&PF_W
) ? PROT_WRITE
: 0) |
711 ((ph
->p_flags
&PF_X
) ? PROT_EXEC
: 0));
712 /* Reuse the existing mapping for the lowest-address LOAD */
713 if ((ph
->p_vaddr
& -PAGE_SIZE
) != addr_min
|| DL_NOMMU_SUPPORT
)
714 if (mmap_fixed(base
+this_min
, this_max
-this_min
, prot
, MAP_PRIVATE
|MAP_FIXED
, fd
, off_start
) == MAP_FAILED
)
716 if (ph
->p_memsz
> ph
->p_filesz
&& (ph
->p_flags
&PF_W
)) {
717 size_t brk
= (size_t)base
+ph
->p_vaddr
+ph
->p_filesz
;
718 size_t pgbrk
= brk
+PAGE_SIZE
-1 & -PAGE_SIZE
;
719 memset((void *)brk
, 0, pgbrk
-brk
& PAGE_SIZE
-1);
720 if (pgbrk
-(size_t)base
< this_max
&& mmap_fixed((void *)pgbrk
, (size_t)base
+this_max
-pgbrk
, prot
, MAP_PRIVATE
|MAP_FIXED
|MAP_ANONYMOUS
, -1, 0) == MAP_FAILED
)
724 for (i
=0; ((size_t *)(base
+dyn
))[i
]; i
+=2)
725 if (((size_t *)(base
+dyn
))[i
]==DT_TEXTREL
) {
726 if (mprotect(map
, map_len
, PROT_READ
|PROT_WRITE
|PROT_EXEC
)
733 dso
->dynv
= laddr(dso
, dyn
);
734 if (dso
->tls
.size
) dso
->tls
.image
= laddr(dso
, tls_image
);
740 if (map
!=MAP_FAILED
) unmap_library(dso
);
745 static int path_open(const char *name
, const char *s
, char *buf
, size_t buf_size
)
750 s
+= strspn(s
, ":\n");
751 l
= strcspn(s
, ":\n");
752 if (l
-1 >= INT_MAX
) return -1;
753 if (snprintf(buf
, buf_size
, "%.*s/%s", (int)l
, s
, name
) < buf_size
) {
754 if ((fd
= open(buf
, O_RDONLY
|O_CLOEXEC
))>=0) return fd
;
762 /* Any negative value but -1 will inhibit
763 * futher path search. */
771 static int fixup_rpath(struct dso
*p
, char *buf
, size_t buf_size
)
774 const char *s
, *t
, *origin
;
776 if (p
->rpath
|| !p
->rpath_orig
) return 0;
777 if (!strchr(p
->rpath_orig
, '$')) {
778 p
->rpath
= p
->rpath_orig
;
783 while ((t
=strchr(s
, '$'))) {
784 if (strncmp(t
, "$ORIGIN", 7) && strncmp(t
, "${ORIGIN}", 9))
789 if (n
> SSIZE_MAX
/PATH_MAX
) return 0;
791 if (p
->kernel_mapped
) {
792 /* $ORIGIN searches cannot be performed for the main program
793 * when it is suid/sgid/AT_SECURE. This is because the
794 * pathname is under the control of the caller of execve.
795 * For libraries, however, $ORIGIN can be processed safely
796 * since the library's pathname came from a trusted source
797 * (either system paths or a call to dlopen). */
800 l
= readlink("/proc/self/exe", buf
, buf_size
);
801 if (l
== -1) switch (errno
) {
816 t
= strrchr(origin
, '/');
820 /* Normally p->name will always be an absolute or relative
821 * pathname containing at least one '/' character, but in the
822 * case where ldso was invoked as a command to execute a
823 * program in the working directory, app.name may not. Fix. */
827 /* Disallow non-absolute origins for suid/sgid/AT_SECURE. */
828 if (libc
.secure
&& *origin
!= '/')
830 p
->rpath
= malloc(strlen(p
->rpath_orig
) + n
*l
+ 1);
831 if (!p
->rpath
) return -1;
835 while ((t
=strchr(s
, '$'))) {
838 memcpy(d
, origin
, l
);
840 /* It was determined previously that the '$' is followed
841 * either by "ORIGIN" or "{ORIGIN}". */
842 s
= t
+ 7 + 2*(t
[1]=='{');
848 static void decode_dyn(struct dso
*p
)
851 decode_vec(p
->dynv
, dyn
, DYN_CNT
);
852 p
->syms
= laddr(p
, dyn
[DT_SYMTAB
]);
853 p
->strings
= laddr(p
, dyn
[DT_STRTAB
]);
854 if (dyn
[0]&(1<<DT_HASH
))
855 p
->hashtab
= laddr(p
, dyn
[DT_HASH
]);
856 if (dyn
[0]&(1<<DT_RPATH
))
857 p
->rpath_orig
= p
->strings
+ dyn
[DT_RPATH
];
858 if (dyn
[0]&(1<<DT_RUNPATH
))
859 p
->rpath_orig
= p
->strings
+ dyn
[DT_RUNPATH
];
860 if (dyn
[0]&(1<<DT_PLTGOT
))
861 p
->got
= laddr(p
, dyn
[DT_PLTGOT
]);
862 if (search_vec(p
->dynv
, dyn
, DT_GNU_HASH
))
863 p
->ghashtab
= laddr(p
, *dyn
);
864 if (search_vec(p
->dynv
, dyn
, DT_VERSYM
))
865 p
->versym
= laddr(p
, *dyn
);
868 static size_t count_syms(struct dso
*p
)
870 if (p
->hashtab
) return p
->hashtab
[1];
873 uint32_t *buckets
= p
->ghashtab
+ 4 + (p
->ghashtab
[2]*sizeof(size_t)/4);
875 for (i
= nsym
= 0; i
< p
->ghashtab
[0]; i
++) {
876 if (buckets
[i
] > nsym
)
880 hashval
= buckets
+ p
->ghashtab
[0] + (nsym
- p
->ghashtab
[1]);
882 while (!(*hashval
++ & 1));
887 static void *dl_mmap(size_t n
)
890 int prot
= PROT_READ
|PROT_WRITE
, flags
= MAP_ANONYMOUS
|MAP_PRIVATE
;
892 p
= (void *)__syscall(SYS_mmap2
, 0, n
, prot
, flags
, -1, 0);
894 p
= (void *)__syscall(SYS_mmap
, 0, n
, prot
, flags
, -1, 0);
896 return p
== MAP_FAILED
? 0 : p
;
899 static void makefuncdescs(struct dso
*p
)
901 static int self_done
;
902 size_t nsym
= count_syms(p
);
903 size_t i
, size
= nsym
* sizeof(*p
->funcdescs
);
906 p
->funcdescs
= dl_mmap(size
);
909 p
->funcdescs
= malloc(size
);
912 if (!runtime
) a_crash();
913 error("Error allocating function descriptors for %s", p
->name
);
914 longjmp(*rtld_fail
, 1);
916 for (i
=0; i
<nsym
; i
++) {
917 if ((p
->syms
[i
].st_info
&0xf)==STT_FUNC
&& p
->syms
[i
].st_shndx
) {
918 p
->funcdescs
[i
].addr
= laddr(p
, p
->syms
[i
].st_value
);
919 p
->funcdescs
[i
].got
= p
->got
;
921 p
->funcdescs
[i
].addr
= 0;
922 p
->funcdescs
[i
].got
= 0;
927 static struct dso
*load_library(const char *name
, struct dso
*needed_by
)
929 char buf
[2*NAME_MAX
+2];
930 const char *pathname
;
932 struct dso
*p
, temp_dso
= {0};
944 /* Catch and block attempts to reload the implementation itself */
945 if (name
[0]=='l' && name
[1]=='i' && name
[2]=='b') {
946 static const char reserved
[] =
947 "c.pthread.rt.m.dl.util.xnet.";
948 const char *rp
, *next
;
949 for (rp
=reserved
; *rp
; rp
=next
) {
950 next
= strchr(rp
, '.') + 1;
951 if (strncmp(name
+3, rp
, next
-rp
) == 0)
956 /* Track which names have been resolved
957 * and only report each one once. */
958 static unsigned reported
;
959 unsigned mask
= 1U<<(rp
-reserved
);
960 if (!(reported
& mask
)) {
962 dprintf(1, "\t%s => %s (%p)\n",
970 if (!strcmp(name
, ldso
.name
)) is_self
= 1;
979 if (strchr(name
, '/')) {
981 fd
= open(name
, O_RDONLY
|O_CLOEXEC
);
983 /* Search for the name to see if it's already loaded */
984 for (p
=head
->next
; p
; p
=p
->next
) {
985 if (p
->shortname
&& !strcmp(p
->shortname
, name
)) {
989 if (strlen(name
) > NAME_MAX
) return 0;
991 if (env_path
) fd
= path_open(name
, env_path
, buf
, sizeof buf
);
992 for (p
=needed_by
; fd
== -1 && p
; p
=p
->needed_by
) {
993 if (fixup_rpath(p
, buf
, sizeof buf
) < 0)
994 fd
= -2; /* Inhibit further search. */
996 fd
= path_open(name
, p
->rpath
, buf
, sizeof buf
);
1002 if (ldso
.name
[0]=='/') {
1004 for (s
=t
=z
=ldso
.name
; *s
; s
++)
1005 if (*s
=='/') z
=t
, t
=s
;
1006 prefix_len
= z
-ldso
.name
;
1007 if (prefix_len
< PATH_MAX
)
1014 char etc_ldso_path
[prefix_len
+ 1
1015 + sizeof "/etc/ld-musl-" LDSO_ARCH
".path"];
1016 snprintf(etc_ldso_path
, sizeof etc_ldso_path
,
1017 "%.*s/etc/ld-musl-" LDSO_ARCH
".path",
1018 (int)prefix_len
, prefix
);
1019 FILE *f
= fopen(etc_ldso_path
, "rbe");
1021 if (getdelim(&sys_path
, (size_t[1]){0}, 0, f
) <= 0) {
1026 } else if (errno
!= ENOENT
) {
1030 if (!sys_path
) sys_path
= "/lib:/usr/local/lib:/usr/lib";
1031 fd
= path_open(name
, sys_path
, buf
, sizeof buf
);
1035 if (fd
< 0) return 0;
1036 if (fstat(fd
, &st
) < 0) {
1040 for (p
=head
->next
; p
; p
=p
->next
) {
1041 if (p
->dev
== st
.st_dev
&& p
->ino
== st
.st_ino
) {
1042 /* If this library was previously loaded with a
1043 * pathname but a search found the same inode,
1044 * setup its shortname so it can be found by name. */
1045 if (!p
->shortname
&& pathname
!= name
)
1046 p
->shortname
= strrchr(p
->name
, '/')+1;
1051 map
= noload
? 0 : map_library(fd
, &temp_dso
);
1055 /* Avoid the danger of getting two versions of libc mapped into the
1056 * same process when an absolute pathname was used. The symbols
1057 * checked are chosen to catch both musl and glibc, and to avoid
1058 * false positives from interposition-hack libraries. */
1059 decode_dyn(&temp_dso
);
1060 if (find_sym(&temp_dso
, "__libc_start_main", 1).sym
&&
1061 find_sym(&temp_dso
, "stdin", 1).sym
) {
1062 unmap_library(&temp_dso
);
1063 return load_library("libc.so", needed_by
);
1065 /* Past this point, if we haven't reached runtime yet, ldso has
1066 * committed either to use the mapped library or to abort execution.
1067 * Unmapping is not possible, so we can safely reclaim gaps. */
1068 if (!runtime
) reclaim_gaps(&temp_dso
);
1070 /* Allocate storage for the new DSO. When there is TLS, this
1071 * storage must include a reservation for all pre-existing
1072 * threads to obtain copies of both the new TLS, and an
1073 * extended DTV capable of storing an additional slot for
1074 * the newly-loaded DSO. */
1075 alloc_size
= sizeof *p
+ strlen(pathname
) + 1;
1076 if (runtime
&& temp_dso
.tls
.image
) {
1077 size_t per_th
= temp_dso
.tls
.size
+ temp_dso
.tls
.align
1078 + sizeof(void *) * (tls_cnt
+3);
1079 n_th
= libc
.threads_minus_1
+ 1;
1080 if (n_th
> SSIZE_MAX
/ per_th
) alloc_size
= SIZE_MAX
;
1081 else alloc_size
+= n_th
* per_th
;
1083 p
= calloc(1, alloc_size
);
1085 unmap_library(&temp_dso
);
1088 memcpy(p
, &temp_dso
, sizeof temp_dso
);
1091 p
->needed_by
= needed_by
;
1093 strcpy(p
->name
, pathname
);
1094 /* Add a shortname only if name arg was not an explicit pathname. */
1095 if (pathname
!= name
) p
->shortname
= strrchr(p
->name
, '/')+1;
1097 p
->tls_id
= ++tls_cnt
;
1098 tls_align
= MAXP2(tls_align
, p
->tls
.align
);
1100 p
->tls
.offset
= tls_offset
+ ( (tls_align
-1) &
1101 -(tls_offset
+ (uintptr_t)p
->tls
.image
) );
1102 tls_offset
+= p
->tls
.size
;
1104 tls_offset
+= p
->tls
.size
+ p
->tls
.align
- 1;
1105 tls_offset
-= (tls_offset
+ (uintptr_t)p
->tls
.image
)
1107 p
->tls
.offset
= tls_offset
;
1109 p
->new_dtv
= (void *)(-sizeof(size_t) &
1110 (uintptr_t)(p
->name
+strlen(p
->name
)+sizeof(size_t)));
1111 p
->new_tls
= (void *)(p
->new_dtv
+ n_th
*(tls_cnt
+1));
1112 if (tls_tail
) tls_tail
->next
= &p
->tls
;
1113 else libc
.tls_head
= &p
->tls
;
1121 if (DL_FDPIC
) makefuncdescs(p
);
1123 if (ldd_mode
) dprintf(1, "\t%s => %s (%p)\n", name
, pathname
, p
->base
);
1128 static void load_deps(struct dso
*p
)
1131 struct dso
***deps
= &p
->deps
, **tmp
, *dep
;
1132 for (; p
; p
=p
->next
) {
1133 for (i
=0; p
->dynv
[i
]; i
+=2) {
1134 if (p
->dynv
[i
] != DT_NEEDED
) continue;
1135 dep
= load_library(p
->strings
+ p
->dynv
[i
+1], p
);
1137 error("Error loading shared library %s: %m (needed by %s)",
1138 p
->strings
+ p
->dynv
[i
+1], p
->name
);
1139 if (runtime
) longjmp(*rtld_fail
, 1);
1143 tmp
= realloc(*deps
, sizeof(*tmp
)*(ndeps
+2));
1144 if (!tmp
) longjmp(*rtld_fail
, 1);
1151 if (!*deps
) *deps
= (struct dso
**)&nodeps_dummy
;
1154 static void load_preload(char *s
)
1158 for (z
=s
; *z
; s
=z
) {
1159 for ( ; *s
&& (isspace(*s
) || *s
==':'); s
++);
1160 for (z
=s
; *z
&& !isspace(*z
) && *z
!=':'; z
++);
1168 static void add_syms(struct dso
*p
)
1170 if (!p
->syms_next
&& syms_tail
!= p
) {
1171 syms_tail
->syms_next
= p
;
1176 static void revert_syms(struct dso
*old_tail
)
1178 struct dso
*p
, *next
;
1179 /* Chop off the tail of the list of dsos that participate in
1180 * the global symbol table, reverting them to RTLD_LOCAL. */
1181 for (p
=old_tail
; p
; p
=next
) {
1182 next
= p
->syms_next
;
1185 syms_tail
= old_tail
;
1188 static void do_mips_relocs(struct dso
*p
, size_t *got
)
1190 size_t i
, j
, rel
[2];
1191 unsigned char *base
= p
->base
;
1192 i
=0; search_vec(p
->dynv
, &i
, DT_MIPS_LOCAL_GOTNO
);
1196 while (i
--) *got
++ += (size_t)base
;
1198 j
=0; search_vec(p
->dynv
, &j
, DT_MIPS_GOTSYM
);
1199 i
=0; search_vec(p
->dynv
, &i
, DT_MIPS_SYMTABNO
);
1200 Sym
*sym
= p
->syms
+ j
;
1201 rel
[0] = (unsigned char *)got
- base
;
1202 for (i
-=j
; i
; i
--, sym
++, rel
[0]+=sizeof(size_t)) {
1203 rel
[1] = R_INFO(sym
-p
->syms
, R_MIPS_JUMP_SLOT
);
1204 do_relocs(p
, rel
, sizeof rel
, 2);
1208 static void reloc_all(struct dso
*p
)
1210 size_t dyn
[DYN_CNT
];
1211 for (; p
; p
=p
->next
) {
1212 if (p
->relocated
) continue;
1213 decode_vec(p
->dynv
, dyn
, DYN_CNT
);
1214 if (NEED_MIPS_GOT_RELOCS
)
1215 do_mips_relocs(p
, laddr(p
, dyn
[DT_PLTGOT
]));
1216 do_relocs(p
, laddr(p
, dyn
[DT_JMPREL
]), dyn
[DT_PLTRELSZ
],
1217 2+(dyn
[DT_PLTREL
]==DT_RELA
));
1218 do_relocs(p
, laddr(p
, dyn
[DT_REL
]), dyn
[DT_RELSZ
], 2);
1219 do_relocs(p
, laddr(p
, dyn
[DT_RELA
]), dyn
[DT_RELASZ
], 3);
1221 if (head
!= &ldso
&& p
->relro_start
!= p
->relro_end
&&
1222 mprotect(laddr(p
, p
->relro_start
), p
->relro_end
-p
->relro_start
, PROT_READ
)
1223 && errno
!= ENOSYS
) {
1224 error("Error relocating %s: RELRO protection failed: %m",
1226 if (runtime
) longjmp(*rtld_fail
, 1);
1233 static void kernel_mapped_dso(struct dso
*p
)
1235 size_t min_addr
= -1, max_addr
= 0, cnt
;
1237 for (cnt
= p
->phnum
; cnt
--; ph
= (void *)((char *)ph
+ p
->phentsize
)) {
1238 if (ph
->p_type
== PT_DYNAMIC
) {
1239 p
->dynv
= laddr(p
, ph
->p_vaddr
);
1240 } else if (ph
->p_type
== PT_GNU_RELRO
) {
1241 p
->relro_start
= ph
->p_vaddr
& -PAGE_SIZE
;
1242 p
->relro_end
= (ph
->p_vaddr
+ ph
->p_memsz
) & -PAGE_SIZE
;
1244 if (ph
->p_type
!= PT_LOAD
) continue;
1245 if (ph
->p_vaddr
< min_addr
)
1246 min_addr
= ph
->p_vaddr
;
1247 if (ph
->p_vaddr
+ph
->p_memsz
> max_addr
)
1248 max_addr
= ph
->p_vaddr
+ph
->p_memsz
;
1250 min_addr
&= -PAGE_SIZE
;
1251 max_addr
= (max_addr
+ PAGE_SIZE
-1) & -PAGE_SIZE
;
1252 p
->map
= p
->base
+ min_addr
;
1253 p
->map_len
= max_addr
- min_addr
;
1254 p
->kernel_mapped
= 1;
1257 void __libc_exit_fini()
1260 size_t dyn
[DYN_CNT
];
1261 for (p
=fini_head
; p
; p
=p
->fini_next
) {
1262 if (!p
->constructed
) continue;
1263 decode_vec(p
->dynv
, dyn
, DYN_CNT
);
1264 if (dyn
[0] & (1<<DT_FINI_ARRAY
)) {
1265 size_t n
= dyn
[DT_FINI_ARRAYSZ
]/sizeof(size_t);
1266 size_t *fn
= (size_t *)laddr(p
, dyn
[DT_FINI_ARRAY
])+n
;
1267 while (n
--) ((void (*)(void))*--fn
)();
1269 #ifndef NO_LEGACY_INITFINI
1270 if ((dyn
[0] & (1<<DT_FINI
)) && dyn
[DT_FINI
])
1271 fpaddr(p
, dyn
[DT_FINI
])();
1276 static void do_init_fini(struct dso
*p
)
1278 size_t dyn
[DYN_CNT
];
1279 int need_locking
= libc
.threads_minus_1
;
1280 /* Allow recursive calls that arise when a library calls
1281 * dlopen from one of its constructors, but block any
1282 * other threads until all ctors have finished. */
1283 if (need_locking
) pthread_mutex_lock(&init_fini_lock
);
1284 for (; p
; p
=p
->prev
) {
1285 if (p
->constructed
) continue;
1287 decode_vec(p
->dynv
, dyn
, DYN_CNT
);
1288 if (dyn
[0] & ((1<<DT_FINI
) | (1<<DT_FINI_ARRAY
))) {
1289 p
->fini_next
= fini_head
;
1292 #ifndef NO_LEGACY_INITFINI
1293 if ((dyn
[0] & (1<<DT_INIT
)) && dyn
[DT_INIT
])
1294 fpaddr(p
, dyn
[DT_INIT
])();
1296 if (dyn
[0] & (1<<DT_INIT_ARRAY
)) {
1297 size_t n
= dyn
[DT_INIT_ARRAYSZ
]/sizeof(size_t);
1298 size_t *fn
= laddr(p
, dyn
[DT_INIT_ARRAY
]);
1299 while (n
--) ((void (*)(void))*fn
++)();
1301 if (!need_locking
&& libc
.threads_minus_1
) {
1303 pthread_mutex_lock(&init_fini_lock
);
1306 if (need_locking
) pthread_mutex_unlock(&init_fini_lock
);
1309 void __libc_start_init(void)
1314 static void dl_debug_state(void)
1318 weak_alias(dl_debug_state
, _dl_debug_state
);
1320 void __init_tls(size_t *auxv
)
1324 hidden
void *__tls_get_new(tls_mod_off_t
*v
)
1326 pthread_t self
= __pthread_self();
1328 /* Block signals to make accessing new TLS async-signal-safe */
1330 __block_all_sigs(&set
);
1331 if (v
[0]<=(size_t)self
->dtv
[0]) {
1332 __restore_sigs(&set
);
1333 return (char *)self
->dtv
[v
[0]]+v
[1]+DTP_OFFSET
;
1336 /* This is safe without any locks held because, if the caller
1337 * is able to request the Nth entry of the DTV, the DSO list
1338 * must be valid at least that far out and it was synchronized
1339 * at program startup or by an already-completed call to dlopen. */
1341 for (p
=head
; p
->tls_id
!= v
[0]; p
=p
->next
);
1343 /* Get new DTV space from new DSO if needed */
1344 if (v
[0] > (size_t)self
->dtv
[0]) {
1345 void **newdtv
= p
->new_dtv
+
1346 (v
[0]+1)*a_fetch_add(&p
->new_dtv_idx
,1);
1347 memcpy(newdtv
, self
->dtv
,
1348 ((size_t)self
->dtv
[0]+1) * sizeof(void *));
1349 newdtv
[0] = (void *)v
[0];
1350 self
->dtv
= self
->dtv_copy
= newdtv
;
1353 /* Get new TLS memory from all new DSOs up to the requested one */
1355 for (p
=head
; ; p
=p
->next
) {
1356 if (!p
->tls_id
|| self
->dtv
[p
->tls_id
]) continue;
1357 mem
= p
->new_tls
+ (p
->tls
.size
+ p
->tls
.align
)
1358 * a_fetch_add(&p
->new_tls_idx
,1);
1359 mem
+= ((uintptr_t)p
->tls
.image
- (uintptr_t)mem
)
1361 self
->dtv
[p
->tls_id
] = mem
;
1362 memcpy(mem
, p
->tls
.image
, p
->tls
.len
);
1363 if (p
->tls_id
== v
[0]) break;
1365 __restore_sigs(&set
);
1366 return mem
+ v
[1] + DTP_OFFSET
;
1369 static void update_tls_size()
1371 libc
.tls_cnt
= tls_cnt
;
1372 libc
.tls_align
= tls_align
;
1373 libc
.tls_size
= ALIGN(
1374 (1+tls_cnt
) * sizeof(void *) +
1376 sizeof(struct pthread
) +
1381 /* Stage 1 of the dynamic linker is defined in dlstart.c. It calls the
1382 * following stage 2 and stage 3 functions via primitive symbolic lookup
1383 * since it does not have access to their addresses to begin with. */
1385 /* Stage 2 of the dynamic linker is called after relative relocations
1386 * have been processed. It can make function calls to static functions
1387 * and access string literals and static data, but cannot use extern
1388 * symbols. Its job is to perform symbolic relocations on the dynamic
1389 * linker itself, but some of the relocations performed may need to be
1390 * replaced later due to copy relocations in the main program. */
1392 hidden
void __dls2(unsigned char *base
, size_t *sp
)
1395 void *p1
= (void *)sp
[-2];
1396 void *p2
= (void *)sp
[-1];
1398 size_t *auxv
, aux
[AUX_CNT
];
1399 for (auxv
=sp
+1+*sp
+1; *auxv
; auxv
++); auxv
++;
1400 decode_vec(auxv
, aux
, AUX_CNT
);
1401 if (aux
[AT_BASE
]) ldso
.base
= (void *)aux
[AT_BASE
];
1402 else ldso
.base
= (void *)(aux
[AT_PHDR
] & -4096);
1404 app_loadmap
= p2
? p1
: 0;
1405 ldso
.loadmap
= p2
? p2
: p1
;
1406 ldso
.base
= laddr(&ldso
, 0);
1410 Ehdr
*ehdr
= (void *)ldso
.base
;
1411 ldso
.name
= ldso
.shortname
= "libc.so";
1412 ldso
.phnum
= ehdr
->e_phnum
;
1413 ldso
.phdr
= laddr(&ldso
, ehdr
->e_phoff
);
1414 ldso
.phentsize
= ehdr
->e_phentsize
;
1415 kernel_mapped_dso(&ldso
);
1418 if (DL_FDPIC
) makefuncdescs(&ldso
);
1420 /* Prepare storage for to save clobbered REL addends so they
1421 * can be reused in stage 3. There should be very few. If
1422 * something goes wrong and there are a huge number, abort
1423 * instead of risking stack overflow. */
1424 size_t dyn
[DYN_CNT
];
1425 decode_vec(ldso
.dynv
, dyn
, DYN_CNT
);
1426 size_t *rel
= laddr(&ldso
, dyn
[DT_REL
]);
1427 size_t rel_size
= dyn
[DT_RELSZ
];
1428 size_t symbolic_rel_cnt
= 0;
1429 apply_addends_to
= rel
;
1430 for (; rel_size
; rel
+=2, rel_size
-=2*sizeof(size_t))
1431 if (!IS_RELATIVE(rel
[1], ldso
.syms
)) symbolic_rel_cnt
++;
1432 if (symbolic_rel_cnt
>= ADDEND_LIMIT
) a_crash();
1433 size_t addends
[symbolic_rel_cnt
+1];
1434 saved_addends
= addends
;
1441 /* Call dynamic linker stage-3, __dls3, looking it up
1442 * symbolically as a barrier against moving the address
1443 * load across the above relocation processing. */
1444 struct symdef dls3_def
= find_sym(&ldso
, "__dls3", 0);
1445 if (DL_FDPIC
) ((stage3_func
)&ldso
.funcdescs
[dls3_def
.sym
-ldso
.syms
])(sp
);
1446 else ((stage3_func
)laddr(&ldso
, dls3_def
.sym
->st_value
))(sp
);
1449 /* Stage 3 of the dynamic linker is called with the dynamic linker/libc
1450 * fully functional. Its job is to load (if not already loaded) and
1451 * process dependencies and relocations for the main application and
1452 * transfer control to its entry point. */
1454 _Noreturn
void __dls3(size_t *sp
)
1456 static struct dso app
, vdso
;
1457 size_t aux
[AUX_CNT
], *auxv
;
1459 char *env_preload
=0;
1460 char *replace_argv0
=0;
1463 char **argv
= (void *)(sp
+1);
1464 char **argv_orig
= argv
;
1465 char **envp
= argv
+argc
+1;
1467 /* Find aux vector just past environ[] and use it to initialize
1468 * global data that may be needed before we can make syscalls. */
1470 for (i
=argc
+1; argv
[i
]; i
++);
1471 libc
.auxv
= auxv
= (void *)(argv
+i
+1);
1472 decode_vec(auxv
, aux
, AUX_CNT
);
1473 __hwcap
= aux
[AT_HWCAP
];
1474 libc
.page_size
= aux
[AT_PAGESZ
];
1475 libc
.secure
= ((aux
[0]&0x7800)!=0x7800 || aux
[AT_UID
]!=aux
[AT_EUID
]
1476 || aux
[AT_GID
]!=aux
[AT_EGID
] || aux
[AT_SECURE
]);
1478 /* Setup early thread pointer in builtin_tls for ldso/libc itself to
1479 * use during dynamic linking. If possible it will also serve as the
1480 * thread pointer at runtime. */
1481 libc
.tls_size
= sizeof builtin_tls
;
1482 libc
.tls_align
= tls_align
;
1483 if (__init_tp(__copy_tls((void *)builtin_tls
)) < 0) {
1487 /* Only trust user/env if kernel says we're not suid/sgid */
1489 env_path
= getenv("LD_LIBRARY_PATH");
1490 env_preload
= getenv("LD_PRELOAD");
1493 /* If the main program was already loaded by the kernel,
1494 * AT_PHDR will point to some location other than the dynamic
1495 * linker's program headers. */
1496 if (aux
[AT_PHDR
] != (size_t)ldso
.phdr
) {
1497 size_t interp_off
= 0;
1498 size_t tls_image
= 0;
1499 /* Find load address of the main program, via AT_PHDR vs PT_PHDR. */
1500 Phdr
*phdr
= app
.phdr
= (void *)aux
[AT_PHDR
];
1501 app
.phnum
= aux
[AT_PHNUM
];
1502 app
.phentsize
= aux
[AT_PHENT
];
1503 for (i
=aux
[AT_PHNUM
]; i
; i
--, phdr
=(void *)((char *)phdr
+ aux
[AT_PHENT
])) {
1504 if (phdr
->p_type
== PT_PHDR
)
1505 app
.base
= (void *)(aux
[AT_PHDR
] - phdr
->p_vaddr
);
1506 else if (phdr
->p_type
== PT_INTERP
)
1507 interp_off
= (size_t)phdr
->p_vaddr
;
1508 else if (phdr
->p_type
== PT_TLS
) {
1509 tls_image
= phdr
->p_vaddr
;
1510 app
.tls
.len
= phdr
->p_filesz
;
1511 app
.tls
.size
= phdr
->p_memsz
;
1512 app
.tls
.align
= phdr
->p_align
;
1515 if (DL_FDPIC
) app
.loadmap
= app_loadmap
;
1516 if (app
.tls
.size
) app
.tls
.image
= laddr(&app
, tls_image
);
1517 if (interp_off
) ldso
.name
= laddr(&app
, interp_off
);
1518 if ((aux
[0] & (1UL<<AT_EXECFN
))
1519 && strncmp((char *)aux
[AT_EXECFN
], "/proc/", 6))
1520 app
.name
= (char *)aux
[AT_EXECFN
];
1523 kernel_mapped_dso(&app
);
1526 char *ldname
= argv
[0];
1527 size_t l
= strlen(ldname
);
1528 if (l
>= 3 && !strcmp(ldname
+l
-3, "ldd")) ldd_mode
= 1;
1530 while (argv
[0] && argv
[0][0]=='-' && argv
[0][1]=='-') {
1531 char *opt
= argv
[0]+2;
1532 *argv
++ = (void *)-1;
1535 } else if (!memcmp(opt
, "list", 5)) {
1537 } else if (!memcmp(opt
, "library-path", 12)) {
1538 if (opt
[12]=='=') env_path
= opt
+13;
1539 else if (opt
[12]) *argv
= 0;
1540 else if (*argv
) env_path
= *argv
++;
1541 } else if (!memcmp(opt
, "preload", 7)) {
1542 if (opt
[7]=='=') env_preload
= opt
+8;
1543 else if (opt
[7]) *argv
= 0;
1544 else if (*argv
) env_preload
= *argv
++;
1545 } else if (!memcmp(opt
, "argv0", 5)) {
1546 if (opt
[5]=='=') replace_argv0
= opt
+6;
1547 else if (opt
[5]) *argv
= 0;
1548 else if (*argv
) replace_argv0
= *argv
++;
1553 argv
[-1] = (void *)(argc
- (argv
-argv_orig
));
1555 dprintf(2, "musl libc (" LDSO_ARCH
")\n"
1557 "Dynamic Program Loader\n"
1558 "Usage: %s [options] [--] pathname%s\n",
1559 __libc_version
, ldname
,
1560 ldd_mode
? "" : " [args]");
1563 fd
= open(argv
[0], O_RDONLY
);
1565 dprintf(2, "%s: cannot load %s: %s\n", ldname
, argv
[0], strerror(errno
));
1568 Ehdr
*ehdr
= (void *)map_library(fd
, &app
);
1570 dprintf(2, "%s: %s: Not a valid dynamic program\n", ldname
, argv
[0]);
1576 aux
[AT_ENTRY
] = (size_t)laddr(&app
, ehdr
->e_entry
);
1577 /* Find the name that would have been used for the dynamic
1578 * linker had ldd not taken its place. */
1580 for (i
=0; i
<app
.phnum
; i
++) {
1581 if (app
.phdr
[i
].p_type
== PT_INTERP
)
1582 ldso
.name
= laddr(&app
, app
.phdr
[i
].p_vaddr
);
1584 dprintf(1, "\t%s (%p)\n", ldso
.name
, ldso
.base
);
1588 libc
.tls_head
= tls_tail
= &app
.tls
;
1589 app
.tls_id
= tls_cnt
= 1;
1591 app
.tls
.offset
= GAP_ABOVE_TP
;
1592 app
.tls
.offset
+= -GAP_ABOVE_TP
& (app
.tls
.align
-1);
1593 tls_offset
= app
.tls
.offset
+ app
.tls
.size
1594 + ( -((uintptr_t)app
.tls
.image
+ app
.tls
.size
)
1595 & (app
.tls
.align
-1) );
1597 tls_offset
= app
.tls
.offset
= app
.tls
.size
1598 + ( -((uintptr_t)app
.tls
.image
+ app
.tls
.size
)
1599 & (app
.tls
.align
-1) );
1601 tls_align
= MAXP2(tls_align
, app
.tls
.align
);
1605 makefuncdescs(&app
);
1607 app
.loadmap
= (void *)&app_dummy_loadmap
;
1608 app
.loadmap
->nsegs
= 1;
1609 app
.loadmap
->segs
[0].addr
= (size_t)app
.map
;
1610 app
.loadmap
->segs
[0].p_vaddr
= (size_t)app
.map
1612 app
.loadmap
->segs
[0].p_memsz
= app
.map_len
;
1614 argv
[-3] = (void *)app
.loadmap
;
1617 /* Initial dso chain consists only of the app. */
1618 head
= tail
= syms_tail
= &app
;
1620 /* Donate unused parts of app and library mapping to malloc */
1622 reclaim_gaps(&ldso
);
1624 /* Load preload/needed libraries, add symbols to global namespace. */
1625 if (env_preload
) load_preload(env_preload
);
1627 for (struct dso
*p
=head
; p
; p
=p
->next
)
1630 /* Attach to vdso, if provided by the kernel, last so that it does
1631 * not become part of the global namespace. */
1632 if (search_vec(auxv
, &vdso_base
, AT_SYSINFO_EHDR
) && vdso_base
) {
1633 Ehdr
*ehdr
= (void *)vdso_base
;
1634 Phdr
*phdr
= vdso
.phdr
= (void *)(vdso_base
+ ehdr
->e_phoff
);
1635 vdso
.phnum
= ehdr
->e_phnum
;
1636 vdso
.phentsize
= ehdr
->e_phentsize
;
1637 for (i
=ehdr
->e_phnum
; i
; i
--, phdr
=(void *)((char *)phdr
+ ehdr
->e_phentsize
)) {
1638 if (phdr
->p_type
== PT_DYNAMIC
)
1639 vdso
.dynv
= (void *)(vdso_base
+ phdr
->p_offset
);
1640 if (phdr
->p_type
== PT_LOAD
)
1641 vdso
.base
= (void *)(vdso_base
- phdr
->p_vaddr
+ phdr
->p_offset
);
1644 vdso
.shortname
= "linux-gate.so.1";
1652 for (i
=0; app
.dynv
[i
]; i
+=2) {
1653 if (!DT_DEBUG_INDIRECT
&& app
.dynv
[i
]==DT_DEBUG
)
1654 app
.dynv
[i
+1] = (size_t)&debug
;
1655 if (DT_DEBUG_INDIRECT
&& app
.dynv
[i
]==DT_DEBUG_INDIRECT
) {
1656 size_t *ptr
= (size_t *) app
.dynv
[i
+1];
1657 *ptr
= (size_t)&debug
;
1661 /* The main program must be relocated LAST since it may contin
1662 * copy relocations which depend on libraries' relocations. */
1663 reloc_all(app
.next
);
1667 if (libc
.tls_size
> sizeof builtin_tls
|| tls_align
> MIN_TLS_ALIGN
) {
1668 void *initial_tls
= calloc(libc
.tls_size
, 1);
1670 dprintf(2, "%s: Error getting %zu bytes thread-local storage: %m\n",
1671 argv
[0], libc
.tls_size
);
1674 if (__init_tp(__copy_tls(initial_tls
)) < 0) {
1678 size_t tmp_tls_size
= libc
.tls_size
;
1679 pthread_t self
= __pthread_self();
1680 /* Temporarily set the tls size to the full size of
1681 * builtin_tls so that __copy_tls will use the same layout
1682 * as it did for before. Then check, just to be safe. */
1683 libc
.tls_size
= sizeof builtin_tls
;
1684 if (__copy_tls((void*)builtin_tls
) != self
) a_crash();
1685 libc
.tls_size
= tmp_tls_size
;
1687 static_tls_cnt
= tls_cnt
;
1689 if (ldso_fail
) _exit(127);
1690 if (ldd_mode
) _exit(0);
1692 /* Determine if malloc was interposed by a replacement implementation
1693 * so that calloc and the memalign family can harden against the
1694 * possibility of incomplete replacement. */
1695 if (find_sym(head
, "malloc", 1).dso
!= &ldso
)
1696 __malloc_replaced
= 1;
1698 /* Switch to runtime mode: any further failures in the dynamic
1699 * linker are a reportable failure rather than a fatal startup
1704 debug
.bp
= dl_debug_state
;
1706 debug
.base
= ldso
.base
;
1710 if (replace_argv0
) argv
[0] = replace_argv0
;
1714 CRTJMP((void *)aux
[AT_ENTRY
], argv
-1);
1718 static void prepare_lazy(struct dso
*p
)
1720 size_t dyn
[DYN_CNT
], n
, flags1
=0;
1721 decode_vec(p
->dynv
, dyn
, DYN_CNT
);
1722 search_vec(p
->dynv
, &flags1
, DT_FLAGS_1
);
1723 if (dyn
[DT_BIND_NOW
] || (dyn
[DT_FLAGS
] & DF_BIND_NOW
) || (flags1
& DF_1_NOW
))
1725 n
= dyn
[DT_RELSZ
]/2 + dyn
[DT_RELASZ
]/3 + dyn
[DT_PLTRELSZ
]/2 + 1;
1726 if (NEED_MIPS_GOT_RELOCS
) {
1727 size_t j
=0; search_vec(p
->dynv
, &j
, DT_MIPS_GOTSYM
);
1728 size_t i
=0; search_vec(p
->dynv
, &i
, DT_MIPS_SYMTABNO
);
1731 p
->lazy
= calloc(n
, 3*sizeof(size_t));
1733 error("Error preparing lazy relocation for %s: %m", p
->name
);
1734 longjmp(*rtld_fail
, 1);
1736 p
->lazy_next
= lazy_head
;
1740 void *dlopen(const char *file
, int mode
)
1742 struct dso
*volatile p
, *orig_tail
, *orig_syms_tail
, *orig_lazy_head
, *next
;
1743 struct tls_module
*orig_tls_tail
;
1744 size_t orig_tls_cnt
, orig_tls_offset
, orig_tls_align
;
1749 if (!file
) return head
;
1751 pthread_setcancelstate(PTHREAD_CANCEL_DISABLE
, &cs
);
1752 pthread_rwlock_wrlock(&lock
);
1756 orig_tls_tail
= tls_tail
;
1757 orig_tls_cnt
= tls_cnt
;
1758 orig_tls_offset
= tls_offset
;
1759 orig_tls_align
= tls_align
;
1760 orig_lazy_head
= lazy_head
;
1761 orig_syms_tail
= syms_tail
;
1763 noload
= mode
& RTLD_NOLOAD
;
1766 if (setjmp(*rtld_fail
)) {
1767 /* Clean up anything new that was (partially) loaded */
1768 revert_syms(orig_syms_tail
);
1769 for (p
=orig_tail
->next
; p
; p
=next
) {
1771 while (p
->td_index
) {
1772 void *tmp
= p
->td_index
->next
;
1777 if (p
->rpath
!= p
->rpath_orig
)
1779 if (p
->deps
!= &nodeps_dummy
)
1784 if (!orig_tls_tail
) libc
.tls_head
= 0;
1785 tls_tail
= orig_tls_tail
;
1786 if (tls_tail
) tls_tail
->next
= 0;
1787 tls_cnt
= orig_tls_cnt
;
1788 tls_offset
= orig_tls_offset
;
1789 tls_align
= orig_tls_align
;
1790 lazy_head
= orig_lazy_head
;
1795 } else p
= load_library(file
, head
);
1799 "Library %s is not already loaded" :
1800 "Error loading shared library %s: %m",
1805 /* First load handling */
1806 int first_load
= !p
->deps
;
1809 if (!p
->relocated
&& (mode
& RTLD_LAZY
)) {
1811 for (i
=0; p
->deps
[i
]; i
++)
1812 if (!p
->deps
[i
]->relocated
)
1813 prepare_lazy(p
->deps
[i
]);
1816 if (first_load
|| (mode
& RTLD_GLOBAL
)) {
1817 /* Make new symbols global, at least temporarily, so we can do
1818 * relocations. If not RTLD_GLOBAL, this is reverted below. */
1820 for (i
=0; p
->deps
[i
]; i
++)
1821 add_syms(p
->deps
[i
]);
1827 /* If RTLD_GLOBAL was not specified, undo any new additions
1828 * to the global symbol table. This is a nop if the library was
1829 * previously loaded and already global. */
1830 if (!(mode
& RTLD_GLOBAL
))
1831 revert_syms(orig_syms_tail
);
1833 /* Processing of deferred lazy relocations must not happen until
1834 * the new libraries are committed; otherwise we could end up with
1835 * relocations resolved to symbol definitions that get removed. */
1844 pthread_rwlock_unlock(&lock
);
1845 if (p
) do_init_fini(orig_tail
);
1846 pthread_setcancelstate(cs
, 0);
1850 hidden
int __dl_invalid_handle(void *h
)
1853 for (p
=head
; p
; p
=p
->next
) if (h
==p
) return 0;
1854 error("Invalid library handle %p", (void *)h
);
1858 static void *addr2dso(size_t a
)
1862 if (DL_FDPIC
) for (p
=head
; p
; p
=p
->next
) {
1864 if (a
-(size_t)p
->funcdescs
< i
*sizeof(*p
->funcdescs
))
1867 for (p
=head
; p
; p
=p
->next
) {
1868 if (DL_FDPIC
&& p
->loadmap
) {
1869 for (i
=0; i
<p
->loadmap
->nsegs
; i
++) {
1870 if (a
-p
->loadmap
->segs
[i
].p_vaddr
1871 < p
->loadmap
->segs
[i
].p_memsz
)
1876 size_t phcnt
= p
->phnum
;
1877 size_t entsz
= p
->phentsize
;
1878 size_t base
= (size_t)p
->base
;
1879 for (; phcnt
--; ph
=(void *)((char *)ph
+entsz
)) {
1880 if (ph
->p_type
!= PT_LOAD
) continue;
1881 if (a
-base
-ph
->p_vaddr
< ph
->p_memsz
)
1884 if (a
-(size_t)p
->map
< p
->map_len
)
1891 static void *do_dlsym(struct dso
*p
, const char *s
, void *ra
)
1894 uint32_t h
= 0, gh
= 0, *ght
;
1896 if (p
== head
|| p
== RTLD_DEFAULT
|| p
== RTLD_NEXT
) {
1897 if (p
== RTLD_DEFAULT
) {
1899 } else if (p
== RTLD_NEXT
) {
1900 p
= addr2dso((size_t)ra
);
1904 struct symdef def
= find_sym(p
, s
, 0);
1905 if (!def
.sym
) goto failed
;
1906 if ((def
.sym
->st_info
&0xf) == STT_TLS
)
1907 return __tls_get_addr((tls_mod_off_t
[]){def
.dso
->tls_id
, def
.sym
->st_value
});
1908 if (DL_FDPIC
&& (def
.sym
->st_info
&0xf) == STT_FUNC
)
1909 return def
.dso
->funcdescs
+ (def
.sym
- def
.dso
->syms
);
1910 return laddr(def
.dso
, def
.sym
->st_value
);
1912 if (__dl_invalid_handle(p
))
1914 if ((ght
= p
->ghashtab
)) {
1916 sym
= gnu_lookup(gh
, ght
, p
, s
);
1919 sym
= sysv_lookup(s
, h
, p
);
1921 if (sym
&& (sym
->st_info
&0xf) == STT_TLS
)
1922 return __tls_get_addr((tls_mod_off_t
[]){p
->tls_id
, sym
->st_value
});
1923 if (DL_FDPIC
&& sym
&& sym
->st_shndx
&& (sym
->st_info
&0xf) == STT_FUNC
)
1924 return p
->funcdescs
+ (sym
- p
->syms
);
1925 if (sym
&& sym
->st_value
&& (1<<(sym
->st_info
&0xf) & OK_TYPES
))
1926 return laddr(p
, sym
->st_value
);
1927 for (i
=0; p
->deps
[i
]; i
++) {
1928 if ((ght
= p
->deps
[i
]->ghashtab
)) {
1929 if (!gh
) gh
= gnu_hash(s
);
1930 sym
= gnu_lookup(gh
, ght
, p
->deps
[i
], s
);
1932 if (!h
) h
= sysv_hash(s
);
1933 sym
= sysv_lookup(s
, h
, p
->deps
[i
]);
1935 if (sym
&& (sym
->st_info
&0xf) == STT_TLS
)
1936 return __tls_get_addr((tls_mod_off_t
[]){p
->deps
[i
]->tls_id
, sym
->st_value
});
1937 if (DL_FDPIC
&& sym
&& sym
->st_shndx
&& (sym
->st_info
&0xf) == STT_FUNC
)
1938 return p
->deps
[i
]->funcdescs
+ (sym
- p
->deps
[i
]->syms
);
1939 if (sym
&& sym
->st_value
&& (1<<(sym
->st_info
&0xf) & OK_TYPES
))
1940 return laddr(p
->deps
[i
], sym
->st_value
);
1943 error("Symbol not found: %s", s
);
1947 int dladdr(const void *addr_arg
, Dl_info
*info
)
1949 size_t addr
= (size_t)addr_arg
;
1955 size_t besterr
= -1;
1957 pthread_rwlock_rdlock(&lock
);
1959 pthread_rwlock_unlock(&lock
);
1964 strings
= p
->strings
;
1965 nsym
= count_syms(p
);
1968 size_t idx
= (addr
-(size_t)p
->funcdescs
)
1969 / sizeof(*p
->funcdescs
);
1970 if (idx
< nsym
&& (sym
[idx
].st_info
&0xf) == STT_FUNC
) {
1971 best
= (size_t)(p
->funcdescs
+ idx
);
1972 bestsym
= sym
+ idx
;
1977 if (!best
) for (; nsym
; nsym
--, sym
++) {
1979 && (1<<(sym
->st_info
&0xf) & OK_TYPES
)
1980 && (1<<(sym
->st_info
>>4) & OK_BINDS
)) {
1981 size_t symaddr
= (size_t)laddr(p
, sym
->st_value
);
1982 if (symaddr
> addr
|| symaddr
<= best
)
1986 besterr
= addr
- symaddr
;
1987 if (addr
== symaddr
)
1992 if (bestsym
&& besterr
> bestsym
->st_size
-1) {
1997 info
->dli_fname
= p
->name
;
1998 info
->dli_fbase
= p
->map
;
2001 info
->dli_sname
= 0;
2002 info
->dli_saddr
= 0;
2006 if (DL_FDPIC
&& (bestsym
->st_info
&0xf) == STT_FUNC
)
2007 best
= (size_t)(p
->funcdescs
+ (bestsym
- p
->syms
));
2008 info
->dli_sname
= strings
+ bestsym
->st_name
;
2009 info
->dli_saddr
= (void *)best
;
2014 hidden
void *__dlsym(void *restrict p
, const char *restrict s
, void *restrict ra
)
2017 pthread_rwlock_rdlock(&lock
);
2018 res
= do_dlsym(p
, s
, ra
);
2019 pthread_rwlock_unlock(&lock
);
2023 int dl_iterate_phdr(int(*callback
)(struct dl_phdr_info
*info
, size_t size
, void *data
), void *data
)
2025 struct dso
*current
;
2026 struct dl_phdr_info info
;
2028 for(current
= head
; current
;) {
2029 info
.dlpi_addr
= (uintptr_t)current
->base
;
2030 info
.dlpi_name
= current
->name
;
2031 info
.dlpi_phdr
= current
->phdr
;
2032 info
.dlpi_phnum
= current
->phnum
;
2033 info
.dlpi_adds
= gencnt
;
2035 info
.dlpi_tls_modid
= current
->tls_id
;
2036 info
.dlpi_tls_data
= current
->tls
.image
;
2038 ret
= (callback
)(&info
, sizeof (info
), data
);
2040 if (ret
!= 0) break;
2042 pthread_rwlock_rdlock(&lock
);
2043 current
= current
->next
;
2044 pthread_rwlock_unlock(&lock
);
2049 static void error(const char *fmt
, ...)
2054 vdprintf(2, fmt
, ap
);
2060 __dl_vseterr(fmt
, ap
);