lib/glibc
1
0
Fork 0
mirror of https://sourceware.org/git/glibc.git synced 2025-07-29 11:41:21 +03:00
Code Activity

x86: Move CET control to _dl_x86_feature_control [BZ #25887]

Browse Source 
1. Include <dl-procruntime.c> to get architecture specific initializer in
rtld_global.
2. Change _dl_x86_feature_1[2] to _dl_x86_feature_1.
3. Add _dl_x86_feature_control after _dl_x86_feature_1, which is a
struct of 2 bitfields for IBT and SHSTK control

This fixes [BZ #25887].
This commit is contained in:
H.J. Lu
2020-04-28 10:05:25 -07:00
parent cbfc16122e
commit 674ea88294
9 changed files with 81 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
elf/rtld.c
View File

@ -315,6 +315,8 @@ rtld_hidden_def (_dl_starting_up)
(except those which cannot be added for some reason). */ (except those which cannot be added for some reason). */
struct rtld_global _rtld_global = struct rtld_global _rtld_global =
{ {
/* Get architecture specific initializer. */
#include <dl-procruntime.c>
/* Generally the default presumption without further information is an /* Generally the default presumption without further information is an
* executable stack but this is not true for all platforms. */ * executable stack but this is not true for all platforms. */
._dl_stack_flags = DEFAULT_STACK_PERMS, ._dl_stack_flags = DEFAULT_STACK_PERMS,

2
sysdeps/i386/dl-machine.h
View File

@ -71,7 +71,7 @@ elf_machine_runtime_setup (struct link_map *l, int lazy, int profile)
extern void _dl_runtime_profile_shstk (Elf32_Word) attribute_hidden; extern void _dl_runtime_profile_shstk (Elf32_Word) attribute_hidden;
/* Check if SHSTK is enabled by kernel. */ /* Check if SHSTK is enabled by kernel. */
bool shstk_enabled bool shstk_enabled
= (GL(dl_x86_feature_1)[0] & GNU_PROPERTY_X86_FEATURE_1_SHSTK) != 0; = (GL(dl_x86_feature_1) & GNU_PROPERTY_X86_FEATURE_1_SHSTK) != 0;
if (l->l_info[DT_JMPREL] && lazy) if (l->l_info[DT_JMPREL] && lazy)
{ {

2
sysdeps/unix/sysv/linux/x86/cpu-features.c
View File

@ -34,7 +34,7 @@ static inline void
x86_setup_tls (void) x86_setup_tls (void)
{ {
__libc_setup_tls (); __libc_setup_tls ();
THREAD_SETMEM (THREAD_SELF, header.feature_1, GL(dl_x86_feature_1)[0]); THREAD_SETMEM (THREAD_SELF, header.feature_1, GL(dl_x86_feature_1));
} }
# define ARCH_SETUP_TLS() x86_setup_tls () # define ARCH_SETUP_TLS() x86_setup_tls ()

34
sysdeps/x86/cet-tunables.h → sysdeps/x86/cet-control.h
View File

@ -16,14 +16,26 @@
License along with the GNU C Library; if not, see License along with the GNU C Library; if not, see
<https://www.gnu.org/licenses/>. */ <https://www.gnu.org/licenses/>. */
/* Valid control values: #ifndef _CET_CONTROL_H
0: Enable CET features based on ELF property note. #define _CET_CONTROL_H
1: Always disable CET features.
2: Always enable CET features. /* For each CET feature, IBT and SHSTK, valid control values. */
3: Enable CET features permissively. enum dl_x86_cet_control
*/ {
#define CET_ELF_PROPERTY 0 /* Enable CET features based on ELF property note. */
#define CET_ALWAYS_OFF 1 cet_elf_property = 0,
#define CET_ALWAYS_ON 2 /* Always enable CET features. */
#define CET_PERMISSIVE 3 cet_always_on,
#define CET_MAX CET_PERMISSIVE /* Always disable CET features. */
cet_always_off,
/* Enable CET features permissively. */
cet_permissive
};
struct dl_x86_feature_control
{
enum dl_x86_cet_control ibt : 2;
enum dl_x86_cet_control shstk : 2;
};
#endif /* cet-control.h */

12
sysdeps/x86/cpu-features.c
View File

@ -39,7 +39,6 @@ extern void TUNABLE_CALLBACK (set_x86_shstk) (tunable_val_t *)
#if CET_ENABLED #if CET_ENABLED
# include <dl-cet.h> # include <dl-cet.h>
# include <cet-tunables.h>
#endif #endif
static void static void
@ -620,7 +619,7 @@ no_cpuid:
if (cet_status) if (cet_status)
{ {
GL(dl_x86_feature_1)[0] = cet_status; GL(dl_x86_feature_1) = cet_status;
# ifndef SHARED # ifndef SHARED
/* Check if IBT and SHSTK are enabled by kernel. */ /* Check if IBT and SHSTK are enabled by kernel. */
@ -644,14 +643,13 @@ no_cpuid:
/* Clear the disabled bits in dl_x86_feature_1. */ /* Clear the disabled bits in dl_x86_feature_1. */
if (res == 0) if (res == 0)
GL(dl_x86_feature_1)[0] &= ~cet_feature; GL(dl_x86_feature_1) &= ~cet_feature;
} }
/* Lock CET if IBT or SHSTK is enabled in executable. Don't /* Lock CET if IBT or SHSTK is enabled in executable. Don't
lock CET if SHSTK is enabled permissively. */ lock CET if IBT or SHSTK is enabled permissively. */
if (((GL(dl_x86_feature_1)[1] >> CET_MAX) if (GL(dl_x86_feature_control).ibt != cet_permissive
& ((1 << CET_MAX) - 1)) && GL(dl_x86_feature_control).shstk != cet_permissive)
!= CET_PERMISSIVE)
dl_cet_lock_cet (); dl_cet_lock_cet ();
} }
# endif # endif

31
sysdeps/x86/cpu-tunables.c
View File

@ -336,28 +336,18 @@ TUNABLE_CALLBACK (set_hwcaps) (tunable_val_t *valp)
} }
# if CET_ENABLED # if CET_ENABLED
# include <cet-tunables.h>
attribute_hidden attribute_hidden
void void
TUNABLE_CALLBACK (set_x86_ibt) (tunable_val_t *valp) TUNABLE_CALLBACK (set_x86_ibt) (tunable_val_t *valp)
{ {
if (DEFAULT_MEMCMP (valp->strval, "on", sizeof ("on")) == 0) if (DEFAULT_MEMCMP (valp->strval, "on", sizeof ("on")) == 0)
{ GL(dl_x86_feature_control).ibt = cet_always_on;
GL(dl_x86_feature_1)[1] &= ~((1 << CET_MAX) - 1);
GL(dl_x86_feature_1)[1] |= CET_ALWAYS_ON;
}
else if (DEFAULT_MEMCMP (valp->strval, "off", sizeof ("off")) == 0) else if (DEFAULT_MEMCMP (valp->strval, "off", sizeof ("off")) == 0)
{ GL(dl_x86_feature_control).ibt = cet_always_off;
GL(dl_x86_feature_1)[1] &= ~((1 << CET_MAX) - 1);
GL(dl_x86_feature_1)[1] |= CET_ALWAYS_OFF;
}
else if (DEFAULT_MEMCMP (valp->strval, "permissive", else if (DEFAULT_MEMCMP (valp->strval, "permissive",
sizeof ("permissive")) == 0) sizeof ("permissive")) == 0)
{ GL(dl_x86_feature_control).ibt = cet_permissive;
GL(dl_x86_feature_1)[1] &= ~((1 << CET_MAX) - 1);
GL(dl_x86_feature_1)[1] |= CET_PERMISSIVE;
}
} }
attribute_hidden attribute_hidden
@ -365,21 +355,12 @@ void
TUNABLE_CALLBACK (set_x86_shstk) (tunable_val_t *valp) TUNABLE_CALLBACK (set_x86_shstk) (tunable_val_t *valp)
{ {
if (DEFAULT_MEMCMP (valp->strval, "on", sizeof ("on")) == 0) if (DEFAULT_MEMCMP (valp->strval, "on", sizeof ("on")) == 0)
{ GL(dl_x86_feature_control).shstk = cet_always_on;
GL(dl_x86_feature_1)[1] &= ~(((1 << CET_MAX) - 1) << CET_MAX);
GL(dl_x86_feature_1)[1] |= (CET_ALWAYS_ON << CET_MAX);
}
else if (DEFAULT_MEMCMP (valp->strval, "off", sizeof ("off")) == 0) else if (DEFAULT_MEMCMP (valp->strval, "off", sizeof ("off")) == 0)
{ GL(dl_x86_feature_control).shstk = cet_always_off;
GL(dl_x86_feature_1)[1] &= ~(((1 << CET_MAX) - 1) << CET_MAX);
GL(dl_x86_feature_1)[1] |= (CET_ALWAYS_OFF << CET_MAX);
}
else if (DEFAULT_MEMCMP (valp->strval, "permissive", else if (DEFAULT_MEMCMP (valp->strval, "permissive",
sizeof ("permissive")) == 0) sizeof ("permissive")) == 0)
{ GL(dl_x86_feature_control).shstk = cet_permissive;
GL(dl_x86_feature_1)[1] &= ~(((1 << CET_MAX) - 1) << CET_MAX);
GL(dl_x86_feature_1)[1] |= (CET_PERMISSIVE << CET_MAX);
}
} }
# endif # endif
#endif #endif

43
sysdeps/x86/dl-cet.c
View File

@ -20,7 +20,6 @@
#include <libintl.h> #include <libintl.h>
#include <ldsodefs.h> #include <ldsodefs.h>
#include <dl-cet.h> #include <dl-cet.h>
#include <cet-tunables.h>
/* GNU_PROPERTY_X86_FEATURE_1_IBT and GNU_PROPERTY_X86_FEATURE_1_SHSTK /* GNU_PROPERTY_X86_FEATURE_1_IBT and GNU_PROPERTY_X86_FEATURE_1_SHSTK
are defined in <elf.h>, which are only available for C sources. are defined in <elf.h>, which are only available for C sources.
@ -39,23 +38,23 @@ static void
dl_cet_check (struct link_map *m, const char *program) dl_cet_check (struct link_map *m, const char *program)
{ {
/* Check how IBT should be enabled. */ /* Check how IBT should be enabled. */
unsigned int enable_ibt_type enum dl_x86_cet_control enable_ibt_type
= GL(dl_x86_feature_1)[1] & ((1 << CET_MAX) - 1); = GL(dl_x86_feature_control).ibt;
/* Check how SHSTK should be enabled. */ /* Check how SHSTK should be enabled. */
unsigned int enable_shstk_type enum dl_x86_cet_control enable_shstk_type
= ((GL(dl_x86_feature_1)[1] >> CET_MAX) & ((1 << CET_MAX) - 1)); = GL(dl_x86_feature_control).shstk;
/* No legacy object check if both IBT and SHSTK are always on. */ /* No legacy object check if both IBT and SHSTK are always on. */
if (enable_ibt_type == CET_ALWAYS_ON if (enable_ibt_type == cet_always_on
&& enable_shstk_type == CET_ALWAYS_ON) && enable_shstk_type == cet_always_on)
return; return;
/* Check if IBT is enabled by kernel. */ /* Check if IBT is enabled by kernel. */
bool ibt_enabled bool ibt_enabled
= (GL(dl_x86_feature_1)[0] & GNU_PROPERTY_X86_FEATURE_1_IBT) != 0; = (GL(dl_x86_feature_1) & GNU_PROPERTY_X86_FEATURE_1_IBT) != 0;
/* Check if SHSTK is enabled by kernel. */ /* Check if SHSTK is enabled by kernel. */
bool shstk_enabled bool shstk_enabled
= (GL(dl_x86_feature_1)[0] & GNU_PROPERTY_X86_FEATURE_1_SHSTK) != 0; = (GL(dl_x86_feature_1) & GNU_PROPERTY_X86_FEATURE_1_SHSTK) != 0;
if (ibt_enabled || shstk_enabled) if (ibt_enabled || shstk_enabled)
{ {
@ -65,9 +64,9 @@ dl_cet_check (struct link_map *m, const char *program)
/* Check if IBT and SHSTK are enabled in object. */ /* Check if IBT and SHSTK are enabled in object. */
bool enable_ibt = (ibt_enabled bool enable_ibt = (ibt_enabled
&& enable_ibt_type != CET_ALWAYS_OFF); && enable_ibt_type != cet_always_off);
bool enable_shstk = (shstk_enabled bool enable_shstk = (shstk_enabled
&& enable_shstk_type != CET_ALWAYS_OFF); && enable_shstk_type != cet_always_off);
if (program) if (program)
{ {
/* Enable IBT and SHSTK only if they are enabled in executable. /* Enable IBT and SHSTK only if they are enabled in executable.
@ -76,10 +75,10 @@ dl_cet_check (struct link_map *m, const char *program)
GLIBC_TUNABLES=glibc.cpu.hwcaps=-IBT,-SHSTK GLIBC_TUNABLES=glibc.cpu.hwcaps=-IBT,-SHSTK
*/ */
enable_ibt &= (HAS_CPU_FEATURE (IBT) enable_ibt &= (HAS_CPU_FEATURE (IBT)
&& (enable_ibt_type == CET_ALWAYS_ON && (enable_ibt_type == cet_always_on
|| (m->l_cet & lc_ibt) != 0)); || (m->l_cet & lc_ibt) != 0));
enable_shstk &= (HAS_CPU_FEATURE (SHSTK) enable_shstk &= (HAS_CPU_FEATURE (SHSTK)
&& (enable_shstk_type == CET_ALWAYS_ON && (enable_shstk_type == cet_always_on
|| (m->l_cet & lc_shstk) != 0)); || (m->l_cet & lc_shstk) != 0));
} }
@ -111,7 +110,7 @@ dl_cet_check (struct link_map *m, const char *program)
/* IBT is enabled only if it is enabled in executable as /* IBT is enabled only if it is enabled in executable as
well as all shared objects. */ well as all shared objects. */
enable_ibt &= (enable_ibt_type == CET_ALWAYS_ON enable_ibt &= (enable_ibt_type == cet_always_on
|| (l->l_cet & lc_ibt) != 0); || (l->l_cet & lc_ibt) != 0);
if (!found_ibt_legacy && enable_ibt != ibt_enabled) if (!found_ibt_legacy && enable_ibt != ibt_enabled)
{ {
@ -121,7 +120,7 @@ dl_cet_check (struct link_map *m, const char *program)
/* SHSTK is enabled only if it is enabled in executable as /* SHSTK is enabled only if it is enabled in executable as
well as all shared objects. */ well as all shared objects. */
enable_shstk &= (enable_shstk_type == CET_ALWAYS_ON enable_shstk &= (enable_shstk_type == cet_always_on
|| (l->l_cet & lc_shstk) != 0); || (l->l_cet & lc_shstk) != 0);
if (enable_shstk != shstk_enabled) if (enable_shstk != shstk_enabled)
{ {
@ -137,7 +136,7 @@ dl_cet_check (struct link_map *m, const char *program)
{ {
if (!program) if (!program)
{ {
if (enable_ibt_type != CET_PERMISSIVE) if (enable_ibt_type != cet_permissive)
{ {
/* When IBT is enabled, we cannot dlopen a shared /* When IBT is enabled, we cannot dlopen a shared
object without IBT. */ object without IBT. */
@ -148,7 +147,7 @@ dl_cet_check (struct link_map *m, const char *program)
N_("rebuild shared object with IBT support enabled")); N_("rebuild shared object with IBT support enabled"));
} }
if (enable_shstk_type != CET_PERMISSIVE) if (enable_shstk_type != cet_permissive)
{ {
/* When SHSTK is enabled, we cannot dlopen a shared /* When SHSTK is enabled, we cannot dlopen a shared
object without SHSTK. */ object without SHSTK. */
@ -159,8 +158,8 @@ dl_cet_check (struct link_map *m, const char *program)
N_("rebuild shared object with SHSTK support enabled")); N_("rebuild shared object with SHSTK support enabled"));
} }
if (enable_ibt_type != CET_PERMISSIVE if (enable_ibt_type != cet_permissive
&& enable_shstk_type != CET_PERMISSIVE) && enable_shstk_type != cet_permissive)
return; return;
} }
@ -190,7 +189,7 @@ dl_cet_check (struct link_map *m, const char *program)
} }
/* Clear the disabled bits in dl_x86_feature_1. */ /* Clear the disabled bits in dl_x86_feature_1. */
GL(dl_x86_feature_1)[0] &= ~cet_feature; GL(dl_x86_feature_1) &= ~cet_feature;
cet_feature_changed = true; cet_feature_changed = true;
} }
@ -199,9 +198,9 @@ dl_cet_check (struct link_map *m, const char *program)
if (program && (ibt_enabled || shstk_enabled)) if (program && (ibt_enabled || shstk_enabled))
{ {
if ((!ibt_enabled if ((!ibt_enabled
|| enable_ibt_type != CET_PERMISSIVE) || enable_ibt_type != cet_permissive)
&& (!shstk_enabled && (!shstk_enabled
|| enable_shstk_type != CET_PERMISSIVE)) || enable_shstk_type != cet_permissive))
{ {
/* Lock CET if IBT or SHSTK is enabled in executable unless /* Lock CET if IBT or SHSTK is enabled in executable unless
IBT or SHSTK is enabled permissively. */ IBT or SHSTK is enabled permissively. */

22
sysdeps/x86/dl-procruntime.c
View File

@ -47,7 +47,27 @@
# if !defined PROCINFO_DECL && defined SHARED # if !defined PROCINFO_DECL && defined SHARED
._dl_x86_feature_1 ._dl_x86_feature_1
# else # else
PROCINFO_CLASS unsigned int _dl_x86_feature_1[2] PROCINFO_CLASS unsigned int _dl_x86_feature_1
# endif
# ifndef PROCINFO_DECL
= 0
# endif
# if !defined SHARED || defined PROCINFO_DECL
;
# else
,
# endif
# if !defined PROCINFO_DECL && defined SHARED
._dl_x86_feature_control
# else
PROCINFO_CLASS struct dl_x86_feature_control _dl_x86_feature_control
# endif
# ifndef PROCINFO_DECL
= {
.ibt = cet_elf_property,
.shstk = cet_elf_property
}
# endif # endif
# if !defined SHARED || defined PROCINFO_DECL # if !defined SHARED || defined PROCINFO_DECL
; ;

1
sysdeps/x86/ldsodefs.h
View File

@ -61,6 +61,7 @@ struct La_x32_retval;
struct La_x86_64_retval *, \ struct La_x86_64_retval *, \
const char *) const char *)
#include <cet-control.h>
#include_next <ldsodefs.h> #include_next <ldsodefs.h>
#endif #endif