2 * Copyright 1996-1998 John D. Polstra.
3 * Copyright (c) 2015 Ruslan Bukin <br@bsdpad.com>
4 * Copyright (c) 2016 Yukishige Shibata <y-shibat@mtd.biglobe.ne.jp>
7 * Portions of this software were developed by SRI International and the
8 * University of Cambridge Computer Laboratory under DARPA/AFRL contract
9 * FA8750-10-C-0237 ("CTSRD"), as part of the DARPA CRASH research programme.
11 * Portions of this software were developed by the University of Cambridge
12 * Computer Laboratory as part of the CTSRD Project, with support from the
13 * UK Higher Education Innovation Fund (HEIF).
15 * Redistribution and use in source and binary forms, with or without
16 * modification, are permitted provided that the following conditions
18 * 1. Redistributions of source code must retain the above copyright
19 * notice, this list of conditions and the following disclaimer.
20 * 2. Redistributions in binary form must reproduce the above copyright
21 * notice, this list of conditions and the following disclaimer in the
22 * documentation and/or other materials provided with the distribution.
24 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
28 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
37 #include <sys/cdefs.h>
38 #include <sys/param.h>
39 #include <sys/kernel.h>
40 #include <sys/systm.h>
42 #include <sys/imgact.h>
43 #include <sys/linker.h>
46 #include <sys/sysctl.h>
47 #include <sys/sysent.h>
48 #include <sys/imgact_elf.h>
49 #include <sys/syscall.h>
50 #include <sys/signalvar.h>
51 #include <sys/vnode.h>
55 #include <vm/vm_param.h>
57 #include <machine/elf.h>
58 #include <machine/md_var.h>
62 static struct sysentvec elf64_freebsd_sysvec = {
63 .sv_size = SYS_MAXSYSCALL,
65 .sv_fixup = __elfN(freebsd_fixup),
66 .sv_sendsig = sendsig,
67 .sv_sigcode = sigcode,
68 .sv_szsigcode = &szsigcode,
69 .sv_name = "FreeBSD ELF64",
70 .sv_coredump = __elfN(coredump),
71 .sv_elf_core_osabi = ELFOSABI_FREEBSD,
72 .sv_elf_core_abi_vendor = FREEBSD_ABI_VENDOR,
73 .sv_elf_core_prepare_notes = __elfN(prepare_notes),
74 .sv_minsigstksz = MINSIGSTKSZ,
75 .sv_minuser = VM_MIN_ADDRESS,
76 .sv_maxuser = 0, /* Filled in during boot. */
77 .sv_usrstack = 0, /* Filled in during boot. */
78 .sv_psstrings = 0, /* Filled in during boot. */
79 .sv_psstringssz = sizeof(struct ps_strings),
80 .sv_stackprot = VM_PROT_READ | VM_PROT_WRITE,
81 .sv_copyout_auxargs = __elfN(freebsd_copyout_auxargs),
82 .sv_copyout_strings = exec_copyout_strings,
83 .sv_setregs = exec_setregs,
86 .sv_flags = SV_ABI_FREEBSD | SV_LP64 | SV_SHP | SV_TIMEKEEP |
87 SV_ASLR | SV_RNG_SEED_VER,
88 .sv_set_syscall_retval = cpu_set_syscall_retval,
89 .sv_fetch_syscall_args = cpu_fetch_syscall_args,
90 .sv_syscallnames = syscallnames,
91 .sv_shared_page_base = 0, /* Filled in during boot. */
92 .sv_shared_page_len = PAGE_SIZE,
94 .sv_thread_detach = NULL,
96 .sv_hwcap = &elf_hwcap,
97 .sv_onexec_old = exec_onexec_old,
98 .sv_onexit = exit_onexit,
99 .sv_regset_begin = SET_BEGIN(__elfN(regset)),
100 .sv_regset_end = SET_LIMIT(__elfN(regset)),
102 INIT_SYSENTVEC(elf64_sysvec, &elf64_freebsd_sysvec);
104 static Elf64_Brandinfo freebsd_brand_info = {
105 .brand = ELFOSABI_FREEBSD,
107 .compat_3_brand = "FreeBSD",
108 .interp_path = "/libexec/ld-elf.so.1",
109 .sysvec = &elf64_freebsd_sysvec,
110 .interp_newpath = NULL,
111 .brand_note = &elf64_freebsd_brandnote,
112 .flags = BI_CAN_EXEC_DYN | BI_BRAND_NOTE
114 SYSINIT(elf64, SI_SUB_EXEC, SI_ORDER_FIRST,
115 (sysinit_cfunc_t)elf64_insert_brand_entry, &freebsd_brand_info);
118 elf64_register_sysvec(void *arg)
120 struct sysentvec *sv;
125 sv->sv_maxuser = VM_MAX_USER_ADDRESS_SV48;
126 sv->sv_usrstack = USRSTACK_SV48;
127 sv->sv_psstrings = PS_STRINGS_SV48;
128 sv->sv_shared_page_base = SHAREDPAGE_SV48;
131 sv->sv_maxuser = VM_MAX_USER_ADDRESS_SV39;
132 sv->sv_usrstack = USRSTACK_SV39;
133 sv->sv_psstrings = PS_STRINGS_SV39;
134 sv->sv_shared_page_base = SHAREDPAGE_SV39;
138 SYSINIT(elf64_register_sysvec, SI_SUB_VM, SI_ORDER_ANY, elf64_register_sysvec,
139 &elf64_freebsd_sysvec);
141 static bool debug_kld;
142 SYSCTL_BOOL(_debug, OID_AUTO, kld_reloc, CTLFLAG_RW, &debug_kld, 0,
143 "Activate debug prints in elf_reloc_internal()");
145 struct type2str_ent {
151 elf64_dump_thread(struct thread *td, void *dst, size_t *off)
157 * Following 4 functions are used to manipulate bits on 32bit integer value.
158 * FIXME: I implemetend for ease-to-understand rather than for well-optimized.
161 gen_bitmask(int msb, int lsb)
165 if (msb == sizeof(mask) * 8 - 1)
168 mask = (1U << (msb + 1)) - 1;
171 mask &= ~((1U << lsb) - 1);
177 extract_bits(uint32_t x, int msb, int lsb)
181 mask = gen_bitmask(msb, lsb);
190 insert_bits(uint32_t d, uint32_t s, int msb, int lsb)
194 mask = gen_bitmask(msb, lsb);
205 insert_imm(uint32_t insn, uint32_t imm, int imm_msb, int imm_lsb,
211 v = extract_bits(imm, imm_msb, imm_lsb);
212 insn_msb = (imm_msb - imm_lsb) + insn_lsb;
214 return (insert_bits(insn, v, insn_msb, insn_lsb));
218 * The RISC-V ISA is designed so that all of immediate values are
220 * An immediate value is sometimes generated at runtime by adding
221 * 12bit sign integer and 20bit signed integer. This requests 20bit
222 * immediate value to be ajusted if the MSB of the 12bit immediate
223 * value is asserted (sign-extended value is treated as negative value).
225 * For example, 0x123800 can be calculated by adding upper 20 bit of
226 * 0x124000 and sign-extended 12bit immediate whose bit pattern is
230 * = (0x123000 + 0x1000) + (-0x1000 + 0x800)
231 * = (0x123000 + 0x1000) + (0xff...ff800)
232 * = 0x124000 + sign-extention(0x800)
235 calc_hi20_imm(uint32_t value)
238 * There is the arithmetical hack that can remove conditional
239 * statement. But I implement it in straightforward way.
241 if ((value & 0x800) != 0)
243 return (value & ~0xfff);
246 static const struct type2str_ent t2s[] = {
247 { R_RISCV_NONE, "R_RISCV_NONE" },
248 { R_RISCV_64, "R_RISCV_64" },
249 { R_RISCV_JUMP_SLOT, "R_RISCV_JUMP_SLOT" },
250 { R_RISCV_RELATIVE, "R_RISCV_RELATIVE" },
251 { R_RISCV_JAL, "R_RISCV_JAL" },
252 { R_RISCV_CALL, "R_RISCV_CALL" },
253 { R_RISCV_PCREL_HI20, "R_RISCV_PCREL_HI20" },
254 { R_RISCV_PCREL_LO12_I, "R_RISCV_PCREL_LO12_I" },
255 { R_RISCV_PCREL_LO12_S, "R_RISCV_PCREL_LO12_S" },
256 { R_RISCV_HI20, "R_RISCV_HI20" },
257 { R_RISCV_LO12_I, "R_RISCV_LO12_I" },
258 { R_RISCV_LO12_S, "R_RISCV_LO12_S" },
262 reloctype_to_str(int type)
266 for (i = 0; i < sizeof(t2s) / sizeof(t2s[0]); ++i) {
267 if (type == t2s[i].type)
275 elf_is_ifunc_reloc(Elf_Size r_info __unused)
282 * Currently kernel loadable module for RISCV is compiled with -fPIC option.
283 * (see also additional CFLAGS definition for RISCV in sys/conf/kmod.mk)
284 * Only R_RISCV_64, R_RISCV_JUMP_SLOT and RISCV_RELATIVE are emitted in
285 * the module. Other relocations will be processed when kernel loadable
286 * modules are built in non-PIC.
288 * FIXME: only RISCV64 is supported.
291 elf_reloc_internal(linker_file_t lf, Elf_Addr relocbase, const void *data,
292 int type, int local, elf_lookup_fn lookup)
294 Elf_Size rtype, symidx;
295 const Elf_Rela *rela;
308 rela = (const Elf_Rela *)data;
309 where = (Elf_Addr *)(relocbase + rela->r_offset);
310 insn32p = (uint32_t *)where;
311 addend = rela->r_addend;
312 rtype = ELF_R_TYPE(rela->r_info);
313 symidx = ELF_R_SYM(rela->r_info);
316 printf("%s:%d unknown reloc type %d\n",
317 __FUNCTION__, __LINE__, type);
326 error = lookup(lf, symidx, 1, &addr);
331 *where = addr + addend;
333 printf("%p %c %-24s %016lx -> %016lx\n", where,
334 (local ? 'l' : 'g'), reloctype_to_str(rtype),
338 case R_RISCV_JUMP_SLOT:
339 error = lookup(lf, symidx, 1, &addr);
346 printf("%p %c %-24s %016lx -> %016lx\n", where,
347 (local ? 'l' : 'g'), reloctype_to_str(rtype),
351 case R_RISCV_RELATIVE:
353 *where = elf_relocaddr(lf, relocbase + addend);
355 printf("%p %c %-24s %016lx -> %016lx\n", where,
356 (local ? 'l' : 'g'), reloctype_to_str(rtype),
361 error = lookup(lf, symidx, 1, &addr);
365 val = addr - (Elf_Addr)where;
366 if (val <= -(1UL << 20) || (1UL << 20) <= val) {
367 printf("kldload: huge offset against R_RISCV_JAL\n");
372 *insn32p = insert_imm(*insn32p, val, 20, 20, 31);
373 *insn32p = insert_imm(*insn32p, val, 10, 1, 21);
374 *insn32p = insert_imm(*insn32p, val, 11, 11, 20);
375 *insn32p = insert_imm(*insn32p, val, 19, 12, 12);
377 printf("%p %c %-24s %08x -> %08x\n", where,
378 (local ? 'l' : 'g'), reloctype_to_str(rtype),
384 * R_RISCV_CALL relocates 8-byte region that consists
385 * of the sequence of AUIPC and JALR.
387 /* Calculate and check the pc relative offset. */
388 error = lookup(lf, symidx, 1, &addr);
392 val = addr - (Elf_Addr)where;
393 if (val <= -(1UL << 32) || (1UL << 32) <= val) {
394 printf("kldload: huge offset against R_RISCV_CALL\n");
398 /* Relocate AUIPC. */
399 before32 = insn32p[0];
400 imm20 = calc_hi20_imm(val);
401 insn32p[0] = insert_imm(insn32p[0], imm20, 31, 12, 12);
404 before32_1 = insn32p[1];
405 insn32p[1] = insert_imm(insn32p[1], val, 11, 0, 20);
407 printf("%p %c %-24s %08x %08x -> %08x %08x\n", where,
408 (local ? 'l' : 'g'), reloctype_to_str(rtype),
409 before32, insn32p[0], before32_1, insn32p[1]);
412 case R_RISCV_PCREL_HI20:
413 error = lookup(lf, symidx, 1, &addr);
417 val = addr - (Elf_Addr)where;
418 insn32p = (uint32_t *)where;
420 imm20 = calc_hi20_imm(val);
421 *insn32p = insert_imm(*insn32p, imm20, 31, 12, 12);
423 printf("%p %c %-24s %08x -> %08x\n", where,
424 (local ? 'l' : 'g'), reloctype_to_str(rtype),
428 case R_RISCV_PCREL_LO12_I:
429 error = lookup(lf, symidx, 1, &addr);
433 val = addr - (Elf_Addr)where;
434 insn32p = (uint32_t *)where;
436 *insn32p = insert_imm(*insn32p, addr, 11, 0, 20);
438 printf("%p %c %-24s %08x -> %08x\n", where,
439 (local ? 'l' : 'g'), reloctype_to_str(rtype),
443 case R_RISCV_PCREL_LO12_S:
444 error = lookup(lf, symidx, 1, &addr);
448 val = addr - (Elf_Addr)where;
449 insn32p = (uint32_t *)where;
451 *insn32p = insert_imm(*insn32p, addr, 11, 5, 25);
452 *insn32p = insert_imm(*insn32p, addr, 4, 0, 7);
454 printf("%p %c %-24s %08x -> %08x\n", where,
455 (local ? 'l' : 'g'), reloctype_to_str(rtype),
460 error = lookup(lf, symidx, 1, &addr);
465 insn32p = (uint32_t *)where;
467 imm20 = calc_hi20_imm(val);
468 *insn32p = insert_imm(*insn32p, imm20, 31, 12, 12);
470 printf("%p %c %-24s %08x -> %08x\n", where,
471 (local ? 'l' : 'g'), reloctype_to_str(rtype),
476 error = lookup(lf, symidx, 1, &addr);
481 insn32p = (uint32_t *)where;
483 *insn32p = insert_imm(*insn32p, addr, 11, 0, 20);
485 printf("%p %c %-24s %08x -> %08x\n", where,
486 (local ? 'l' : 'g'), reloctype_to_str(rtype),
491 error = lookup(lf, symidx, 1, &addr);
496 insn32p = (uint32_t *)where;
498 *insn32p = insert_imm(*insn32p, addr, 11, 5, 25);
499 *insn32p = insert_imm(*insn32p, addr, 4, 0, 7);
501 printf("%p %c %-24s %08x -> %08x\n", where,
502 (local ? 'l' : 'g'), reloctype_to_str(rtype),
507 printf("kldload: unexpected relocation type %ld, "
508 "symbol index %ld\n", rtype, symidx);
516 elf_reloc(linker_file_t lf, Elf_Addr relocbase, const void *data, int type,
517 elf_lookup_fn lookup)
520 return (elf_reloc_internal(lf, relocbase, data, type, 0, lookup));
524 elf_reloc_local(linker_file_t lf, Elf_Addr relocbase, const void *data,
525 int type, elf_lookup_fn lookup)
528 return (elf_reloc_internal(lf, relocbase, data, type, 1, lookup));
532 elf_cpu_load_file(linker_file_t lf __unused)
539 elf_cpu_unload_file(linker_file_t lf __unused)
546 elf_cpu_parse_dynamic(caddr_t loadbase __unused, Elf_Dyn *dynamic __unused)