1 /*
2 * Copyright (C) 2019 The Android Open Source Project
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * * Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * * Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in
12 * the documentation and/or other materials provided with the
13 * distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
16 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
17 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
18 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
19 * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
20 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
21 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
22 * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
23 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
24 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
25 * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26 * SUCH DAMAGE.
27 */
28
29 #include "linker_relocate.h"
30
31 #include <elf.h>
32 #include <link.h>
33
34 #include <type_traits>
35
36 #include "linker.h"
37 #include "linker_debug.h"
38 #include "linker_globals.h"
39 #include "linker_gnu_hash.h"
40 #include "linker_phdr.h"
41 #include "linker_relocs.h"
42 #include "linker_reloc_iterators.h"
43 #include "linker_sleb128.h"
44 #include "linker_soinfo.h"
45 #include "private/bionic_globals.h"
46
is_tls_reloc(ElfW (Word)type)47 static bool is_tls_reloc(ElfW(Word) type) {
48 switch (type) {
49 case R_GENERIC_TLS_DTPMOD:
50 case R_GENERIC_TLS_DTPREL:
51 case R_GENERIC_TLS_TPREL:
52 #if defined(R_GENERIC_TLSDESC)
53 case R_GENERIC_TLSDESC:
54 #endif
55 return true;
56 default:
57 return false;
58 }
59 }
60
61 class Relocator {
62 public:
Relocator(const VersionTracker & version_tracker,const SymbolLookupList & lookup_list)63 Relocator(const VersionTracker& version_tracker, const SymbolLookupList& lookup_list)
64 : version_tracker(version_tracker), lookup_list(lookup_list)
65 {}
66
67 soinfo* si = nullptr;
68 const char* si_strtab = nullptr;
69 size_t si_strtab_size = 0;
70 ElfW(Sym)* si_symtab = nullptr;
71
72 const VersionTracker& version_tracker;
73 const SymbolLookupList& lookup_list;
74
75 // Cache key
76 ElfW(Word) cache_sym_val = 0;
77 // Cache value
78 const ElfW(Sym)* cache_sym = nullptr;
79 soinfo* cache_si = nullptr;
80
81 std::vector<TlsDynamicResolverArg>* tlsdesc_args;
82 std::vector<std::pair<TlsDescriptor*, size_t>> deferred_tlsdesc_relocs;
83 size_t tls_tp_base = 0;
84
85 __attribute__((always_inline))
get_string(ElfW (Word)index)86 const char* get_string(ElfW(Word) index) {
87 if (__predict_false(index >= si_strtab_size)) {
88 async_safe_fatal("%s: strtab out of bounds error; STRSZ=%zd, name=%d",
89 si->get_realpath(), si_strtab_size, index);
90 }
91 return si_strtab + index;
92 }
93 };
94
95 template <bool DoLogging>
96 __attribute__((always_inline))
lookup_symbol(Relocator & relocator,uint32_t r_sym,const char * sym_name,soinfo ** found_in,const ElfW (Sym)** sym)97 static inline bool lookup_symbol(Relocator& relocator, uint32_t r_sym, const char* sym_name,
98 soinfo** found_in, const ElfW(Sym)** sym) {
99 if (r_sym == relocator.cache_sym_val) {
100 *found_in = relocator.cache_si;
101 *sym = relocator.cache_sym;
102 count_relocation_if<DoLogging>(kRelocSymbolCached);
103 } else {
104 const version_info* vi = nullptr;
105 if (!relocator.si->lookup_version_info(relocator.version_tracker, r_sym, sym_name, &vi)) {
106 return false;
107 }
108
109 soinfo* local_found_in = nullptr;
110 const ElfW(Sym)* local_sym = soinfo_do_lookup(sym_name, vi, &local_found_in, relocator.lookup_list);
111
112 relocator.cache_sym_val = r_sym;
113 relocator.cache_si = local_found_in;
114 relocator.cache_sym = local_sym;
115 *found_in = local_found_in;
116 *sym = local_sym;
117 }
118
119 if (*sym == nullptr) {
120 if (ELF_ST_BIND(relocator.si_symtab[r_sym].st_info) != STB_WEAK) {
121 DL_ERR("cannot locate symbol \"%s\" referenced by \"%s\"...", sym_name, relocator.si->get_realpath());
122 return false;
123 }
124 }
125
126 count_relocation_if<DoLogging>(kRelocSymbol);
127 return true;
128 }
129
130 enum class RelocMode {
131 // Fast path for JUMP_SLOT relocations.
132 JumpTable,
133 // Fast path for typical relocations: ABSOLUTE, GLOB_DAT, or RELATIVE.
134 Typical,
135 // Handle all relocation types, relocations in text sections, and statistics/tracing.
136 General,
137 };
138
139 struct linker_stats_t {
140 int count[kRelocMax];
141 };
142
143 static linker_stats_t linker_stats;
144
count_relocation(RelocationKind kind)145 void count_relocation(RelocationKind kind) {
146 ++linker_stats.count[kind];
147 }
148
print_linker_stats()149 void print_linker_stats() {
150 PRINT("RELO STATS: %s: %d abs, %d rel, %d symbol (%d cached)",
151 g_argv[0],
152 linker_stats.count[kRelocAbsolute],
153 linker_stats.count[kRelocRelative],
154 linker_stats.count[kRelocSymbol],
155 linker_stats.count[kRelocSymbolCached]);
156 }
157
158 static bool process_relocation_general(Relocator& relocator, const rel_t& reloc);
159
160 template <RelocMode Mode>
161 __attribute__((always_inline))
process_relocation_impl(Relocator & relocator,const rel_t & reloc)162 static bool process_relocation_impl(Relocator& relocator, const rel_t& reloc) {
163 constexpr bool IsGeneral = Mode == RelocMode::General;
164
165 void* const rel_target = reinterpret_cast<void*>(reloc.r_offset + relocator.si->load_bias);
166 const uint32_t r_type = ELFW(R_TYPE)(reloc.r_info);
167 const uint32_t r_sym = ELFW(R_SYM)(reloc.r_info);
168
169 soinfo* found_in = nullptr;
170 const ElfW(Sym)* sym = nullptr;
171 const char* sym_name = nullptr;
172 ElfW(Addr) sym_addr = 0;
173
174 if (r_sym != 0) {
175 sym_name = relocator.get_string(relocator.si_symtab[r_sym].st_name);
176 }
177
178 // While relocating a DSO with text relocations (obsolete and 32-bit only), the .text segment is
179 // writable (but not executable). To call an ifunc, temporarily remap the segment as executable
180 // (but not writable). Then switch it back to continue applying relocations in the segment.
181 #if defined(__LP64__)
182 const bool handle_text_relocs = false;
183 auto protect_segments = []() { return true; };
184 auto unprotect_segments = []() { return true; };
185 #else
186 const bool handle_text_relocs = IsGeneral && relocator.si->has_text_relocations;
187 auto protect_segments = [&]() {
188 // Make .text executable.
189 if (phdr_table_protect_segments(relocator.si->phdr, relocator.si->phnum,
190 relocator.si->load_bias,
191 relocator.si->should_pad_segments()) < 0) {
192 DL_ERR("can't protect segments for \"%s\": %s",
193 relocator.si->get_realpath(), strerror(errno));
194 return false;
195 }
196 return true;
197 };
198 auto unprotect_segments = [&]() {
199 // Make .text writable.
200 if (phdr_table_unprotect_segments(relocator.si->phdr, relocator.si->phnum,
201 relocator.si->load_bias,
202 relocator.si->should_pad_segments()) < 0) {
203 DL_ERR("can't unprotect loadable segments for \"%s\": %s",
204 relocator.si->get_realpath(), strerror(errno));
205 return false;
206 }
207 return true;
208 };
209 #endif
210
211 auto trace_reloc = [](const char* fmt, ...) __printflike(2, 3) {
212 if (IsGeneral &&
213 g_ld_debug_verbosity > LINKER_VERBOSITY_TRACE &&
214 DO_TRACE_RELO) {
215 va_list ap;
216 va_start(ap, fmt);
217 linker_log_va_list(LINKER_VERBOSITY_TRACE, fmt, ap);
218 va_end(ap);
219 }
220 };
221
222 // Skip symbol lookup for R_GENERIC_NONE relocations.
223 if (__predict_false(r_type == R_GENERIC_NONE)) {
224 trace_reloc("RELO NONE");
225 return true;
226 }
227
228 #if defined(USE_RELA)
229 auto get_addend_rel = [&]() -> ElfW(Addr) { return reloc.r_addend; };
230 auto get_addend_norel = [&]() -> ElfW(Addr) { return reloc.r_addend; };
231 #else
232 auto get_addend_rel = [&]() -> ElfW(Addr) { return *static_cast<ElfW(Addr)*>(rel_target); };
233 auto get_addend_norel = [&]() -> ElfW(Addr) { return 0; };
234 #endif
235
236 if (!IsGeneral && __predict_false(is_tls_reloc(r_type))) {
237 // Always process TLS relocations using the slow code path, so that STB_LOCAL symbols are
238 // diagnosed, and ifunc processing is skipped.
239 return process_relocation_general(relocator, reloc);
240 }
241
242 if (IsGeneral && is_tls_reloc(r_type)) {
243 if (r_sym == 0) {
244 // By convention in ld.bfd and lld, an omitted symbol on a TLS relocation
245 // is a reference to the current module.
246 found_in = relocator.si;
247 } else if (ELF_ST_BIND(relocator.si_symtab[r_sym].st_info) == STB_LOCAL) {
248 // In certain situations, the Gold linker accesses a TLS symbol using a
249 // relocation to an STB_LOCAL symbol in .dynsym of either STT_SECTION or
250 // STT_TLS type. Bionic doesn't support these relocations, so issue an
251 // error. References:
252 // - https://groups.google.com/d/topic/generic-abi/dJ4_Y78aQ2M/discussion
253 // - https://sourceware.org/bugzilla/show_bug.cgi?id=17699
254 sym = &relocator.si_symtab[r_sym];
255 auto sym_type = ELF_ST_TYPE(sym->st_info);
256 if (sym_type == STT_SECTION) {
257 DL_ERR("unexpected TLS reference to local section in \"%s\": sym type %d, rel type %u",
258 relocator.si->get_realpath(), sym_type, r_type);
259 } else {
260 DL_ERR(
261 "unexpected TLS reference to local symbol \"%s\" in \"%s\": sym type %d, rel type %u",
262 sym_name, relocator.si->get_realpath(), sym_type, r_type);
263 }
264 return false;
265 } else if (!lookup_symbol<IsGeneral>(relocator, r_sym, sym_name, &found_in, &sym)) {
266 return false;
267 }
268 if (found_in != nullptr && found_in->get_tls() == nullptr) {
269 // sym_name can be nullptr if r_sym is 0. A linker should never output an ELF file like this.
270 DL_ERR("TLS relocation refers to symbol \"%s\" in solib \"%s\" with no TLS segment",
271 sym_name, found_in->get_realpath());
272 return false;
273 }
274 if (sym != nullptr) {
275 if (ELF_ST_TYPE(sym->st_info) != STT_TLS) {
276 // A toolchain should never output a relocation like this.
277 DL_ERR("reference to non-TLS symbol \"%s\" from TLS relocation in \"%s\"",
278 sym_name, relocator.si->get_realpath());
279 return false;
280 }
281 sym_addr = sym->st_value;
282 }
283 } else {
284 if (r_sym == 0) {
285 // Do nothing.
286 } else {
287 if (!lookup_symbol<IsGeneral>(relocator, r_sym, sym_name, &found_in, &sym)) return false;
288 if (sym != nullptr) {
289 const bool should_protect_segments = handle_text_relocs &&
290 found_in == relocator.si &&
291 ELF_ST_TYPE(sym->st_info) == STT_GNU_IFUNC;
292 if (should_protect_segments && !protect_segments()) return false;
293 sym_addr = found_in->resolve_symbol_address(sym);
294 if (should_protect_segments && !unprotect_segments()) return false;
295 } else if constexpr (IsGeneral) {
296 // A weak reference to an undefined symbol. We typically use a zero symbol address, but
297 // use the relocation base for PC-relative relocations, so that the value written is zero.
298 switch (r_type) {
299 #if defined(__x86_64__)
300 case R_X86_64_PC32:
301 sym_addr = reinterpret_cast<ElfW(Addr)>(rel_target);
302 break;
303 #elif defined(__i386__)
304 case R_386_PC32:
305 sym_addr = reinterpret_cast<ElfW(Addr)>(rel_target);
306 break;
307 #endif
308 }
309 }
310 }
311 }
312
313 if constexpr (IsGeneral || Mode == RelocMode::JumpTable) {
314 if (r_type == R_GENERIC_JUMP_SLOT) {
315 count_relocation_if<IsGeneral>(kRelocAbsolute);
316 const ElfW(Addr) result = sym_addr + get_addend_norel();
317 trace_reloc("RELO JMP_SLOT %16p <- %16p %s",
318 rel_target, reinterpret_cast<void*>(result), sym_name);
319 *static_cast<ElfW(Addr)*>(rel_target) = result;
320 return true;
321 }
322 }
323
324 if constexpr (IsGeneral || Mode == RelocMode::Typical) {
325 // Almost all dynamic relocations are of one of these types, and most will be
326 // R_GENERIC_ABSOLUTE. The platform typically uses RELR instead, but R_GENERIC_RELATIVE is
327 // common in non-platform binaries.
328 if (r_type == R_GENERIC_ABSOLUTE) {
329 count_relocation_if<IsGeneral>(kRelocAbsolute);
330 const ElfW(Addr) result = sym_addr + get_addend_rel();
331 trace_reloc("RELO ABSOLUTE %16p <- %16p %s",
332 rel_target, reinterpret_cast<void*>(result), sym_name);
333 *static_cast<ElfW(Addr)*>(rel_target) = result;
334 return true;
335 } else if (r_type == R_GENERIC_GLOB_DAT) {
336 // The i386 psABI specifies that R_386_GLOB_DAT doesn't have an addend. The ARM ELF ABI
337 // document (IHI0044F) specifies that R_ARM_GLOB_DAT has an addend, but Bionic isn't adding
338 // it.
339 count_relocation_if<IsGeneral>(kRelocAbsolute);
340 const ElfW(Addr) result = sym_addr + get_addend_norel();
341 trace_reloc("RELO GLOB_DAT %16p <- %16p %s",
342 rel_target, reinterpret_cast<void*>(result), sym_name);
343 *static_cast<ElfW(Addr)*>(rel_target) = result;
344 return true;
345 } else if (r_type == R_GENERIC_RELATIVE) {
346 // In practice, r_sym is always zero, but if it weren't, the linker would still look up the
347 // referenced symbol (and abort if the symbol isn't found), even though it isn't used.
348 count_relocation_if<IsGeneral>(kRelocRelative);
349 const ElfW(Addr) result = relocator.si->load_bias + get_addend_rel();
350 trace_reloc("RELO RELATIVE %16p <- %16p",
351 rel_target, reinterpret_cast<void*>(result));
352 *static_cast<ElfW(Addr)*>(rel_target) = result;
353 return true;
354 }
355 }
356
357 if constexpr (!IsGeneral) {
358 // Almost all relocations are handled above. Handle the remaining relocations below, in a
359 // separate function call. The symbol lookup will be repeated, but the result should be served
360 // from the 1-symbol lookup cache.
361 return process_relocation_general(relocator, reloc);
362 }
363
364 switch (r_type) {
365 case R_GENERIC_IRELATIVE:
366 // In the linker, ifuncs are called as soon as possible so that string functions work. We must
367 // not call them again. (e.g. On arm32, resolving an ifunc changes the meaning of the addend
368 // from a resolver function to the implementation.)
369 if (!relocator.si->is_linker()) {
370 count_relocation_if<IsGeneral>(kRelocRelative);
371 const ElfW(Addr) ifunc_addr = relocator.si->load_bias + get_addend_rel();
372 trace_reloc("RELO IRELATIVE %16p <- %16p",
373 rel_target, reinterpret_cast<void*>(ifunc_addr));
374 if (handle_text_relocs && !protect_segments()) return false;
375 const ElfW(Addr) result = call_ifunc_resolver(ifunc_addr);
376 if (handle_text_relocs && !unprotect_segments()) return false;
377 *static_cast<ElfW(Addr)*>(rel_target) = result;
378 }
379 break;
380 case R_GENERIC_COPY:
381 // Copy relocations allow read-only data or code in a non-PIE executable to access a
382 // variable from a DSO. The executable reserves extra space in its .bss section, and the
383 // linker copies the variable into the extra space. The executable then exports its copy
384 // to interpose the copy in the DSO.
385 //
386 // Bionic only supports PIE executables, so copy relocations aren't supported. The ARM and
387 // AArch64 ABI documents only allow them for ET_EXEC (non-PIE) objects. See IHI0056B and
388 // IHI0044F.
389 DL_ERR("%s COPY relocations are not supported", relocator.si->get_realpath());
390 return false;
391 case R_GENERIC_TLS_TPREL:
392 count_relocation_if<IsGeneral>(kRelocRelative);
393 {
394 ElfW(Addr) tpoff = 0;
395 if (found_in == nullptr) {
396 // Unresolved weak relocation. Leave tpoff at 0 to resolve
397 // &weak_tls_symbol to __get_tls().
398 } else {
399 CHECK(found_in->get_tls() != nullptr); // We rejected a missing TLS segment above.
400 const TlsModule& mod = get_tls_module(found_in->get_tls()->module_id);
401 if (mod.static_offset != SIZE_MAX) {
402 tpoff += mod.static_offset - relocator.tls_tp_base;
403 } else {
404 DL_ERR("TLS symbol \"%s\" in dlopened \"%s\" referenced from \"%s\" using IE access model",
405 sym_name, found_in->get_realpath(), relocator.si->get_realpath());
406 return false;
407 }
408 }
409 tpoff += sym_addr + get_addend_rel();
410 trace_reloc("RELO TLS_TPREL %16p <- %16p %s",
411 rel_target, reinterpret_cast<void*>(tpoff), sym_name);
412 *static_cast<ElfW(Addr)*>(rel_target) = tpoff;
413 }
414 break;
415 case R_GENERIC_TLS_DTPMOD:
416 count_relocation_if<IsGeneral>(kRelocRelative);
417 {
418 size_t module_id = 0;
419 if (found_in == nullptr) {
420 // Unresolved weak relocation. Evaluate the module ID to 0.
421 } else {
422 CHECK(found_in->get_tls() != nullptr); // We rejected a missing TLS segment above.
423 module_id = found_in->get_tls()->module_id;
424 CHECK(module_id != kTlsUninitializedModuleId);
425 }
426 trace_reloc("RELO TLS_DTPMOD %16p <- %zu %s",
427 rel_target, module_id, sym_name);
428 *static_cast<ElfW(Addr)*>(rel_target) = module_id;
429 }
430 break;
431 case R_GENERIC_TLS_DTPREL:
432 count_relocation_if<IsGeneral>(kRelocRelative);
433 {
434 const ElfW(Addr) result = sym_addr + get_addend_rel() - TLS_DTV_OFFSET;
435 trace_reloc("RELO TLS_DTPREL %16p <- %16p %s",
436 rel_target, reinterpret_cast<void*>(result), sym_name);
437 *static_cast<ElfW(Addr)*>(rel_target) = result;
438 }
439 break;
440
441 #if defined(__aarch64__) || defined(__riscv)
442 // Bionic currently implements TLSDESC for arm64 and riscv64. This implementation should work
443 // with other architectures, as long as the resolver functions are implemented.
444 case R_GENERIC_TLSDESC:
445 count_relocation_if<IsGeneral>(kRelocRelative);
446 {
447 ElfW(Addr) addend = reloc.r_addend;
448 TlsDescriptor* desc = static_cast<TlsDescriptor*>(rel_target);
449 if (found_in == nullptr) {
450 // Unresolved weak relocation.
451 desc->func = tlsdesc_resolver_unresolved_weak;
452 desc->arg = addend;
453 trace_reloc("RELO TLSDESC %16p <- unresolved weak, addend 0x%zx %s",
454 rel_target, static_cast<size_t>(addend), sym_name);
455 } else {
456 CHECK(found_in->get_tls() != nullptr); // We rejected a missing TLS segment above.
457 size_t module_id = found_in->get_tls()->module_id;
458 const TlsModule& mod = get_tls_module(module_id);
459 if (mod.static_offset != SIZE_MAX) {
460 desc->func = tlsdesc_resolver_static;
461 desc->arg = mod.static_offset - relocator.tls_tp_base + sym_addr + addend;
462 trace_reloc("RELO TLSDESC %16p <- static (0x%zx - 0x%zx + 0x%zx + 0x%zx) %s",
463 rel_target, mod.static_offset, relocator.tls_tp_base,
464 static_cast<size_t>(sym_addr), static_cast<size_t>(addend),
465 sym_name);
466 } else {
467 relocator.tlsdesc_args->push_back({
468 .generation = mod.first_generation,
469 .index.module_id = module_id,
470 .index.offset = sym_addr + addend,
471 });
472 // Defer the TLSDESC relocation until the address of the TlsDynamicResolverArg object
473 // is finalized.
474 relocator.deferred_tlsdesc_relocs.push_back({
475 desc, relocator.tlsdesc_args->size() - 1
476 });
477 const TlsDynamicResolverArg& desc_arg = relocator.tlsdesc_args->back();
478 trace_reloc("RELO TLSDESC %16p <- dynamic (gen %zu, mod %zu, off %zu) %s",
479 rel_target, desc_arg.generation, desc_arg.index.module_id,
480 desc_arg.index.offset, sym_name);
481 }
482 }
483 }
484 break;
485 #endif // defined(__aarch64__) || defined(__riscv)
486
487 #if defined(__x86_64__)
488 case R_X86_64_32:
489 count_relocation_if<IsGeneral>(kRelocAbsolute);
490 {
491 const Elf32_Addr result = sym_addr + reloc.r_addend;
492 trace_reloc("RELO R_X86_64_32 %16p <- 0x%08x %s",
493 rel_target, result, sym_name);
494 *static_cast<Elf32_Addr*>(rel_target) = result;
495 }
496 break;
497 case R_X86_64_PC32:
498 count_relocation_if<IsGeneral>(kRelocRelative);
499 {
500 const ElfW(Addr) target = sym_addr + reloc.r_addend;
501 const ElfW(Addr) base = reinterpret_cast<ElfW(Addr)>(rel_target);
502 const Elf32_Addr result = target - base;
503 trace_reloc("RELO R_X86_64_PC32 %16p <- 0x%08x (%16p - %16p) %s",
504 rel_target, result, reinterpret_cast<void*>(target),
505 reinterpret_cast<void*>(base), sym_name);
506 *static_cast<Elf32_Addr*>(rel_target) = result;
507 }
508 break;
509 #elif defined(__i386__)
510 case R_386_PC32:
511 count_relocation_if<IsGeneral>(kRelocRelative);
512 {
513 const ElfW(Addr) target = sym_addr + get_addend_rel();
514 const ElfW(Addr) base = reinterpret_cast<ElfW(Addr)>(rel_target);
515 const ElfW(Addr) result = target - base;
516 trace_reloc("RELO R_386_PC32 %16p <- 0x%08x (%16p - %16p) %s",
517 rel_target, result, reinterpret_cast<void*>(target),
518 reinterpret_cast<void*>(base), sym_name);
519 *static_cast<ElfW(Addr)*>(rel_target) = result;
520 }
521 break;
522 #endif
523 default:
524 DL_ERR("unknown reloc type %d in \"%s\"", r_type, relocator.si->get_realpath());
525 return false;
526 }
527 return true;
528 }
529
530 __attribute__((noinline))
process_relocation_general(Relocator & relocator,const rel_t & reloc)531 static bool process_relocation_general(Relocator& relocator, const rel_t& reloc) {
532 return process_relocation_impl<RelocMode::General>(relocator, reloc);
533 }
534
535 template <RelocMode Mode>
536 __attribute__((always_inline))
process_relocation(Relocator & relocator,const rel_t & reloc)537 static inline bool process_relocation(Relocator& relocator, const rel_t& reloc) {
538 return Mode == RelocMode::General ?
539 process_relocation_general(relocator, reloc) :
540 process_relocation_impl<Mode>(relocator, reloc);
541 }
542
543 template <RelocMode Mode>
544 __attribute__((noinline))
plain_relocate_impl(Relocator & relocator,rel_t * rels,size_t rel_count)545 static bool plain_relocate_impl(Relocator& relocator, rel_t* rels, size_t rel_count) {
546 for (size_t i = 0; i < rel_count; ++i) {
547 if (!process_relocation<Mode>(relocator, rels[i])) {
548 return false;
549 }
550 }
551 return true;
552 }
553
554 template <RelocMode Mode>
555 __attribute__((noinline))
packed_relocate_impl(Relocator & relocator,sleb128_decoder decoder)556 static bool packed_relocate_impl(Relocator& relocator, sleb128_decoder decoder) {
557 return for_all_packed_relocs(decoder, [&](const rel_t& reloc) {
558 return process_relocation<Mode>(relocator, reloc);
559 });
560 }
561
needs_slow_relocate_loop(const Relocator & relocator __unused)562 static bool needs_slow_relocate_loop(const Relocator& relocator __unused) {
563 #if STATS
564 // TODO: This could become a run-time flag.
565 return true;
566 #endif
567 #if !defined(__LP64__)
568 if (relocator.si->has_text_relocations) return true;
569 #endif
570 if (g_ld_debug_verbosity > LINKER_VERBOSITY_TRACE) {
571 // If linker TRACE() is enabled, then each relocation is logged.
572 return true;
573 }
574 return false;
575 }
576
577 template <RelocMode OptMode, typename ...Args>
plain_relocate(Relocator & relocator,Args...args)578 static bool plain_relocate(Relocator& relocator, Args ...args) {
579 return needs_slow_relocate_loop(relocator) ?
580 plain_relocate_impl<RelocMode::General>(relocator, args...) :
581 plain_relocate_impl<OptMode>(relocator, args...);
582 }
583
584 template <RelocMode OptMode, typename ...Args>
packed_relocate(Relocator & relocator,Args...args)585 static bool packed_relocate(Relocator& relocator, Args ...args) {
586 return needs_slow_relocate_loop(relocator) ?
587 packed_relocate_impl<RelocMode::General>(relocator, args...) :
588 packed_relocate_impl<OptMode>(relocator, args...);
589 }
590
relocate(const SymbolLookupList & lookup_list)591 bool soinfo::relocate(const SymbolLookupList& lookup_list) {
592 // For ldd, don't apply relocations because TLS segments are not registered.
593 // We don't care whether ldd diagnoses unresolved symbols.
594 if (g_is_ldd) {
595 return true;
596 }
597
598 VersionTracker version_tracker;
599
600 if (!version_tracker.init(this)) {
601 return false;
602 }
603
604 Relocator relocator(version_tracker, lookup_list);
605 relocator.si = this;
606 relocator.si_strtab = strtab_;
607 relocator.si_strtab_size = has_min_version(1) ? strtab_size_ : SIZE_MAX;
608 relocator.si_symtab = symtab_;
609 relocator.tlsdesc_args = &tlsdesc_args_;
610 relocator.tls_tp_base = __libc_shared_globals()->static_tls_layout.offset_thread_pointer();
611
612 // The linker already applied its RELR relocations in an earlier pass, so
613 // skip the RELR relocations for the linker.
614 if (relr_ != nullptr && !is_linker()) {
615 DEBUG("[ relocating %s relr ]", get_realpath());
616 const ElfW(Relr)* begin = relr_;
617 const ElfW(Relr)* end = relr_ + relr_count_;
618 if (!relocate_relr(begin, end, load_bias)) {
619 return false;
620 }
621 }
622
623 if (android_relocs_ != nullptr) {
624 // check signature
625 if (android_relocs_size_ > 3 &&
626 android_relocs_[0] == 'A' &&
627 android_relocs_[1] == 'P' &&
628 android_relocs_[2] == 'S' &&
629 android_relocs_[3] == '2') {
630 DEBUG("[ android relocating %s ]", get_realpath());
631
632 const uint8_t* packed_relocs = android_relocs_ + 4;
633 const size_t packed_relocs_size = android_relocs_size_ - 4;
634
635 if (!packed_relocate<RelocMode::Typical>(relocator, sleb128_decoder(packed_relocs, packed_relocs_size))) {
636 return false;
637 }
638 } else {
639 DL_ERR("bad android relocation header.");
640 return false;
641 }
642 }
643
644 #if defined(USE_RELA)
645 if (rela_ != nullptr) {
646 DEBUG("[ relocating %s rela ]", get_realpath());
647
648 if (!plain_relocate<RelocMode::Typical>(relocator, rela_, rela_count_)) {
649 return false;
650 }
651 }
652 if (plt_rela_ != nullptr) {
653 DEBUG("[ relocating %s plt rela ]", get_realpath());
654 if (!plain_relocate<RelocMode::JumpTable>(relocator, plt_rela_, plt_rela_count_)) {
655 return false;
656 }
657 }
658 #else
659 if (rel_ != nullptr) {
660 DEBUG("[ relocating %s rel ]", get_realpath());
661 if (!plain_relocate<RelocMode::Typical>(relocator, rel_, rel_count_)) {
662 return false;
663 }
664 }
665 if (plt_rel_ != nullptr) {
666 DEBUG("[ relocating %s plt rel ]", get_realpath());
667 if (!plain_relocate<RelocMode::JumpTable>(relocator, plt_rel_, plt_rel_count_)) {
668 return false;
669 }
670 }
671 #endif
672
673 // Once the tlsdesc_args_ vector's size is finalized, we can write the addresses of its elements
674 // into the TLSDESC relocations.
675 #if defined(__aarch64__) || defined(__riscv)
676 // Bionic currently only implements TLSDESC for arm64 and riscv64.
677 for (const std::pair<TlsDescriptor*, size_t>& pair : relocator.deferred_tlsdesc_relocs) {
678 TlsDescriptor* desc = pair.first;
679 desc->func = tlsdesc_resolver_dynamic;
680 desc->arg = reinterpret_cast<size_t>(&tlsdesc_args_[pair.second]);
681 }
682 #endif // defined(__aarch64__) || defined(__riscv)
683
684 return true;
685 }
686