system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-07-22 18:56:38 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

sysent: Add sv_protect

Browse source 
To allow for architecture specific protections add sv_protect to struct
sysent. This can be used to apply these after the executable is loaded
into the new address space.

Reviewed by:	kib
Sponsored by:	Arm Ltd
Differential Revision:	https://reviews.freebsd.org/D42440
This commit is contained in:
Andrew Turner 2023-11-02 09:49:27 +00:00
parent a04633cef8
commit eb32c1c75a
2 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
sys/kern/imgact_elf.c
View file

@ -862,6 +862,9 @@ __elfN(load_file)(struct proc *p, const char *file, u_long *addr,
if (error != 0)
goto fail;
if (p->p_sysent->sv_protect != NULL)
p->p_sysent->sv_protect(imgp, SVP_INTERP);
*addr = base_addr;
*entry = (unsigned long)hdr->e_entry + rbase;
@ -1369,6 +1372,9 @@ __CONCAT(exec_, __elfN(imgact))(struct image_params *imgp)
entry = (u_long)hdr->e_entry + imgp->et_dyn_addr;
imgp->entry_addr = entry;
if (sv->sv_protect != NULL)
sv->sv_protect(imgp, SVP_IMAGE);
if (interp != NULL) {
VOP_UNLOCK(imgp->vp);
if ((map->flags & MAP_ASLR) != 0) {

5
sys/sys/sysent.h
View file

@ -149,6 +149,7 @@ struct sysentvec {
vm_offset_t sv_fxrng_gen_offset;
void (*sv_onexec_old)(struct thread *td);
int (*sv_onexec)(struct proc *, struct image_params *);
void (*sv_protect)(struct image_params *, int);
void (*sv_onexit)(struct proc *);
void (*sv_ontdexit)(struct thread *td);
int (*sv_setid_allowed)(struct thread *td,
@ -187,6 +188,10 @@ struct sysentvec {
#define SVC_NOCOMPRESS 0x00000002 /* disable compression. */
#define SVC_ALL 0x00000004 /* dump everything */
/* sv_protect flags */
#define SVP_IMAGE 0x00000001
#define SVP_INTERP 0x00000002
#ifdef _KERNEL
extern struct sysentvec aout_sysvec;
extern struct sysent sysent[];