mirror of
https://sourceware.org/git/glibc.git
synced 2024-12-26 12:41:05 +00:00
8e1472d2c1
GLRO (_rtld_global_ro) is read-only after initialization and can therefore not be patched at run time, unlike the hook table addresses and their contents, so this is a desirable hardening feature. The hooks are only needed if ld.so has not been initialized, and this happens only after static dlopen (dlmopen uses a single ld.so object across all namespaces). Reviewed-by: Carlos O'Donell <carlos@redhat.com>
108 lines
2.8 KiB
C
108 lines
2.8 KiB
C
/* Load a shared object at run time.
|
|
Copyright (C) 1995-2017 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<http://www.gnu.org/licenses/>. */
|
|
|
|
#include <dlfcn.h>
|
|
#include <errno.h>
|
|
#include <libintl.h>
|
|
#include <stddef.h>
|
|
#include <unistd.h>
|
|
#include <ldsodefs.h>
|
|
|
|
#if !defined SHARED && IS_IN (libdl)
|
|
|
|
void *
|
|
dlmopen (Lmid_t nsid, const char *file, int mode)
|
|
{
|
|
return __dlmopen (nsid, file, mode, RETURN_ADDRESS (0));
|
|
}
|
|
static_link_warning (dlmopen)
|
|
|
|
#else
|
|
|
|
struct dlmopen_args
|
|
{
|
|
/* Namespace ID. */
|
|
Lmid_t nsid;
|
|
/* The arguments for dlopen_doit. */
|
|
const char *file;
|
|
int mode;
|
|
/* The return value of dlopen_doit. */
|
|
void *new;
|
|
/* Address of the caller. */
|
|
const void *caller;
|
|
};
|
|
|
|
static void
|
|
dlmopen_doit (void *a)
|
|
{
|
|
struct dlmopen_args *args = (struct dlmopen_args *) a;
|
|
|
|
/* Non-shared code has no support for multiple namespaces. */
|
|
if (args->nsid != LM_ID_BASE)
|
|
{
|
|
# ifdef SHARED
|
|
/* If trying to open the link map for the main executable the namespace
|
|
must be the main one. */
|
|
if (args->file == NULL)
|
|
# endif
|
|
_dl_signal_error (EINVAL, NULL, NULL, N_("invalid namespace"));
|
|
|
|
/* It makes no sense to use RTLD_GLOBAL when loading a DSO into
|
|
a namespace other than the base namespace. */
|
|
if (__glibc_unlikely (args->mode & RTLD_GLOBAL))
|
|
_dl_signal_error (EINVAL, NULL, NULL, N_("invalid mode"));
|
|
}
|
|
|
|
args->new = GLRO(dl_open) (args->file ?: "", args->mode | __RTLD_DLOPEN,
|
|
args->caller,
|
|
args->nsid, __dlfcn_argc, __dlfcn_argv,
|
|
__environ);
|
|
}
|
|
|
|
|
|
void *
|
|
__dlmopen (Lmid_t nsid, const char *file, int mode DL_CALLER_DECL)
|
|
{
|
|
# ifdef SHARED
|
|
if (!rtld_active ())
|
|
return _dlfcn_hook->dlmopen (nsid, file, mode, RETURN_ADDRESS (0));
|
|
# endif
|
|
|
|
struct dlmopen_args args;
|
|
args.nsid = nsid;
|
|
args.file = file;
|
|
args.mode = mode;
|
|
args.caller = DL_CALLER;
|
|
|
|
# ifdef SHARED
|
|
return _dlerror_run (dlmopen_doit, &args) ? NULL : args.new;
|
|
# else
|
|
if (_dlerror_run (dlmopen_doit, &args))
|
|
return NULL;
|
|
|
|
__libc_register_dl_open_hook ((struct link_map *) args.new);
|
|
__libc_register_dlfcn_hook ((struct link_map *) args.new);
|
|
|
|
return args.new;
|
|
# endif
|
|
}
|
|
# ifdef SHARED
|
|
strong_alias (__dlmopen, dlmopen)
|
|
# endif
|
|
#endif
|