summaryrefslogtreecommitdiffstats
path: root/libexec
AgeCommit message (Collapse)AuthorFilesLines
2019-05-08rm dead code and simplify ftpd_popen. this code has only calledtedu5-75/+42
its statically linked ls_main for some time now. from Jan Klemkow ok deraadt
2019-05-08On retguard systems, remove the ld.so-local stack-protector handlingderaadt1-7/+9
functions because retguard uses hard-traps instead. ok mortimer.
2019-05-01Pull tname initialization up since it's used in an error path.florian1-2/+3
Pointed out by jsg, just fix it deraadt@
2019-04-21Now that all Elf_foo types are correct, we don't need to use Elf32_Wordderaadt2-15/+15
anywhere and can use Elf_Word instead. ok guenther
2019-04-21On alpha, the buckets of DT_HASH are 8 bytes instead of 4 bytes. This wasguenther2-6/+13
previously 'implemented' by having the Elf_Word typedef in <sys/exec_elf.h> vary, but that doesn't match the spec and breaks libelf so it's gone away. Implement the variation here by defining our own type locally for this. ok deraadt@
2019-04-19Prevent clang from using builtins and jump tables in _dl_boot_bind()visa1-1/+4
on mips64. They need relocation and consequently cannot be used in that function. OK kettenis@
2019-02-14spelling/consistency fix; from nam nguyenjmc1-3/+3
2019-02-10Simplify NFS checkkn1-3/+2
Instead of getting all filesystems with df(1), filter /usr/share/ and check with mount(1) whether it's NFS, make df error out directly if the filesystem type matches nfs. OK sthen tb
2019-02-03_dl_cerror is trivial on powerpc; just inline the handling into the stubsguenther1-4/+2
based on a diff from miod@
2019-02-03_dl_cerror is trivial on alpha and m88k; just inline the hanlding intoguenther3-14/+6
the stubs noted by miod@
2019-01-25On i386, ensure that the first PT_LOAD segment is below the W^Xkurt1-31/+20
line unless it is writable. lld places read-only sections below the gap so this is needed to be able to retain W^X with lld. Note however the read-only sections below the W^X line are now executable on pre-NX machines and a possible source of gadgets. This is a change from Gnu ld where RO sections were ordered above the W^X line and not executable. okay drahn@ kettenis@ deraadt@
2019-01-25I am retiring my old email address; replace it with my OpenBSD one.millert8-18/+18
2018-12-11Flip snprintf(3) error check to align it with the man page example.bluhm1-2/+2
No functional change. suggested by tb@; from Jan Klemkow
2018-12-11Convert some variables with non-negative values to unsigned typebluhm1-6/+7
to avoid comparison of integers of different signs. from Jan Klemkow; OK tb@
2018-12-05Delete an unused struct member that has hid out here for 17 yearsguenther1-3/+1
2018-12-03DT_MIPS_RLD_MAP is an offset, so relocate it when present.guenther1-3/+4
This fixes handling of lld-linked executables on mips64. problem reported by visa@ and worked out with him
2018-11-28Implement support for DT_GNU_HASH, taking all the interesting bitsguenther2-21/+136
from Matt Dillon's implementation in DragonFlyBSD commit 7629c631. One difference is that as long as DT_HASH is still present, ld.so will use that to get the total number of symbols rather than walking the GNU hash chains. Note that the GPLv2 binutils we have doesn't support DT_GNU_HASH, so this only helps archs were lld is used. ok kettenis@ mpi@
2018-11-22Make alpha less special: _dl_boot_bind() is written to completeguenther3-45/+15
relocation of ld.so's GOT without using it, so _reloc_alpha_got() merely made the call to _dl_boot_bind() from asm simpler...while itself being a call that required special handling. diff and muild baking by miod@ ok guenther@
2018-11-20On mips64, DT_DEBUG doesn't need mprotecting if it's in the GNU_RELRO segmentguenther1-6/+8
ok visa@
2018-11-17need to closefrom(0) before execve(), otherwise tty isn't properlyderaadt1-1/+2
'hung up'; some testing by Theodore Wynnychenko
2018-11-16Finish ld.so's transition to GNU_RELRO: eliminate support for usingguenther14-139/+38
__got_{start,end} to find a region to mark read-only. It was only used for binaries that didn't have a GNU_RELRO segment, but all archs have been using that for over a year. Since support for insecure-PLT layouts on powerpc and alpha have been removed, all archs handle GNU_RELRO the same way and the support can be moved from the MD code to the MI code. ok mpi@
2018-11-16Borrow an idea from DragonFly BSD: factor out the "does this symbol match whatguenther1-38/+54
we're looking up?" logic from _dl_find_symbol_obj() into matched_symbol(), so that the former is just the "iterate across the hash" logic. matched_symbol() returns zero on "not found", one on "found strong symbol", and negative one on "found weak symbol". The last of those lets the caller give up on this object after finding a weak symbol, as there's no point in continuing to search for a strong symbol in the same object. ok mpi@
2018-11-15Put all the symbol lookup parameters (except the object being searched) andguenther1-72/+60
the return pointers into a structure and pass that to _dl_find_symbol_obj(). Set sl->sl_obj_out in _dl_find_symbol_obj() so that the callers don't need to each record the object. ok mpi@
2018-11-15Theodore Wynnychenko discovered the gettytab "lo=path" feature didn't workderaadt2-10/+26
anymore with unveil wired to /usr/bin/login. So let's parse gettytab a bit earlier to learn which login path to unveil. Later in the loop gettytab is re-parsed, if the login changes re-exec getty to reach the unveil from the top. ok millert, also discussed with mestre
2018-11-12Delete support for non-secureplt binaries. The secure PLT format has beenguenther2-109/+11
the default for years and ports doesn't appear to have anything patching to use the old format. ok deraadt@
2018-11-09Delete superfluous libc reach-around variables, left over from theguenther1-4/+1
old syscall stubs. Prompted by miod@'s poke on m88k ok visa@
2018-11-09Delete superfluous libc reacharounds.guenther3-20/+15
Replace magic numbers with symbolic constants in ldasm.S Let the kernel do the cacheflush optimization. from miod@
2018-11-09Delete support for obsolete BSS PLT format, which was last known to beguenther1-314/+38
used by the dearly departed editors/emacs21 port. Per naddy@, we'll keep an eye out for issues in the next ports bulk build
2018-11-02ld.so's malloc has no runtime option processing, so remove theotto1-75/+72
setting flags and replace them by constants. ok deraadt@ guenther@
2018-10-25The compilers already put static arrays in .rodata when not written to;guenther6-18/+18
marking them const will keep a source change from silently moving them back to .data ok deraadt@ kettenis@
2018-10-25When spamd(8) runs in greylist mode in the parent process (which runsmestre1-1/+13
greywatcher()) we know that the only files that it will ever access are PATH_SPAMD_DB in rw mode, alloweddomains_file in r and that it will need to execute PATH_PFCTL so we can unveil(2) them with those permissions. OK deraadt@ millert@ beck@
2018-10-25The only file that spamlogd(8) needs to access after calling pledge(2) ismestre1-1/+3
PATH_SPAMD_DB, so unveil(2) it with O_RDWR permissions. OK millert@ beck@
2018-10-23Delay processing of ld.so's own PT_GNU_RELRO section until after environmentguenther5-86/+70
processing and malloc initialization, and then move variables set by those steps, including malloc's mopts structure, into the .data.rel.ro segment. This protects more data and eliminates the extra padding of the mopts. ok kettenis@
2018-10-22More "explicitely" -> "explicitly" in various comments.krw1-2/+2
ok guenther@ tb@ deraadt@
2018-10-22Use int, not char*, for booleansguenther4-19/+20
ok millert@
2018-10-01Add retguard to arm64 ld.so.mortimer2-7/+7
ok kettenis@
2018-09-30Remove the hopefully last remnants of kerberos in there: arg_login,ajacoutot1-12/+1
arg_notickets and invokinguser. ok kn@ millert@
2018-09-25document HUP;jmc1-2/+8
based on a diff from katherine rohl, shortened by request of deraadt
2018-09-24unveil maildir, utmp, /tmp, and /dev. For the vast number of peoplederaadt1-1/+9
using biff.
2018-09-24unveil(2) in getty. This has been in snaps for more than 2 months,deraadt1-1/+14
since I worry that a mistake in here will cause significant grief.
2018-09-02update tradcpp to 0.5.2jsg18-148/+650
ok miko@ bcallah@ deraadt@
2018-08-29make ld.so build reproducible by including a FILE symbol and by removingrobert1-4/+12
-x from ld; this is only used for syspatch creation so builds are still randomized just as before ok guenther@
2018-08-08lockspool only plays with files in _PATH_MAILDIR, so unveil that path.deraadt1-1/+4
2018-08-03Move pledge to after getopt, when the finger program becomes knownderaadt1-4/+6
(defaults to /usr/bin/finger, but can be redefined with -P option). Then unveil that program for "x" (execution), and pledge as before. No other filesystem accesses occur after that point.
2018-07-24Fix address calculation for _DYNAMIC. We want to address of _DYNAMIC itself,kettenis1-2/+2
not the address of its GOT entry. The current code mixed the high bits of the GOT entry address with the low bits of the true address. This only worked by accident for small binaries where _DYNAMIC and its GOT entry happen to reside on the same page. ok guenther@, mortimer@
2018-07-09unify the various per-arch syscall.h as much as possiblederaadt11-74/+80
ok kettenis guenther
2018-06-28add missing ${LIBCRYPTO} to DPADDgsoares1-2/+2
OK deraadt@ millert@ jca@
2018-06-16Add add PIE support for m88k (requires gcc4 toolchain)guenther1-3/+5
Convert __cerror to hidden visibility. from miod@
2018-06-14silence a compiler warninggsoares1-2/+2
OK millert
2018-06-13Call pledge(2) earlier before opening the auth channel and readpassphrase()reyk3-8/+15
Before this change, only the password validation was pledged, now it also includes some more code including the "Password:" prompt. To pledge the code earlier, the getpwnam_shadow() had to be moved up - it works under "getpw" but it does not return the actual password hash under pledge. This also works with yp(ldap). OK deraadt@ tb@ brynet@
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.