421 lines
		
	
	
		
			12 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			421 lines
		
	
	
		
			12 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
#include "inc.h"
 | 
						|
#include <a.out.h>
 | 
						|
 | 
						|
#define BLOCK_SIZE	1024
 | 
						|
 | 
						|
static int do_exec(int proc_e, char *exec, size_t exec_len, char *progname,
 | 
						|
	char *frame, int frame_len);
 | 
						|
FORWARD _PROTOTYPE( int read_header, (char *exec, size_t exec_len, int *sep_id,
 | 
						|
	vir_bytes *text_bytes, vir_bytes *data_bytes,
 | 
						|
	vir_bytes *bss_bytes, phys_bytes *tot_bytes, vir_bytes *pc,
 | 
						|
	int *hdrlenp)							);
 | 
						|
FORWARD _PROTOTYPE( int exec_newmem, (int proc_e, vir_bytes text_bytes,
 | 
						|
	vir_bytes data_bytes, vir_bytes bss_bytes, vir_bytes tot_bytes,
 | 
						|
	vir_bytes frame_len, int sep_id,
 | 
						|
	dev_t st_dev, ino_t st_ino, time_t st_ctime, char *progname,
 | 
						|
	int new_uid, int new_gid,
 | 
						|
	vir_bytes *stack_topp, int *load_textp, int *allow_setuidp)	);
 | 
						|
FORWARD _PROTOTYPE( int exec_restart, (int proc_e, int result,
 | 
						|
				       vir_bytes pc)    		);
 | 
						|
FORWARD _PROTOTYPE( void patch_ptr, (char stack[ARG_MAX],
 | 
						|
							vir_bytes base)	);
 | 
						|
FORWARD _PROTOTYPE( int read_seg, (char *exec, size_t exec_len, off_t off,
 | 
						|
	int proc_e, int seg, phys_bytes seg_bytes)			);
 | 
						|
 | 
						|
int srv_execve(int proc_e, char *exec, size_t exec_len, char **argv,
 | 
						|
	char **Xenvp)
 | 
						|
{
 | 
						|
	char * const *ap;
 | 
						|
	char * const *ep;
 | 
						|
	char *frame;
 | 
						|
	char **vp;
 | 
						|
	char *sp, *progname;
 | 
						|
	size_t argc;
 | 
						|
	size_t frame_size;
 | 
						|
	size_t string_off;
 | 
						|
	size_t n;
 | 
						|
	int ov;
 | 
						|
	int r;
 | 
						|
 | 
						|
	/* Assumptions: size_t and char *, it's all the same thing. */
 | 
						|
 | 
						|
	/* Create a stack image that only needs to be patched up slightly
 | 
						|
	 * by the kernel to be used for the process to be executed.
 | 
						|
	 */
 | 
						|
 | 
						|
	ov= 0;			/* No overflow yet. */
 | 
						|
	frame_size= 0;		/* Size of the new initial stack. */
 | 
						|
	string_off= 0;		/* Offset to start of the strings. */
 | 
						|
	argc= 0;		/* Argument count. */
 | 
						|
 | 
						|
	for (ap= argv; *ap != NULL; ap++) {
 | 
						|
		n = sizeof(*ap) + strlen(*ap) + 1;
 | 
						|
		frame_size+= n;
 | 
						|
		if (frame_size < n) ov= 1;
 | 
						|
		string_off+= sizeof(*ap);
 | 
						|
		argc++;
 | 
						|
	}
 | 
						|
 | 
						|
	/* Add an argument count and two terminating nulls. */
 | 
						|
	frame_size+= sizeof(argc) + sizeof(*ap) + sizeof(*ep);
 | 
						|
	string_off+= sizeof(argc) + sizeof(*ap) + sizeof(*ep);
 | 
						|
 | 
						|
	/* Align. */
 | 
						|
	frame_size= (frame_size + sizeof(char *) - 1) & ~(sizeof(char *) - 1);
 | 
						|
 | 
						|
	/* The party is off if there is an overflow. */
 | 
						|
	if (ov || frame_size < 3 * sizeof(char *)) {
 | 
						|
		errno= E2BIG;
 | 
						|
		return -1;
 | 
						|
	}
 | 
						|
 | 
						|
	/* Allocate space for the stack frame. */
 | 
						|
	frame = (char *) malloc(frame_size);
 | 
						|
	if (!frame) {
 | 
						|
		errno = E2BIG;
 | 
						|
		return -1;
 | 
						|
	}
 | 
						|
 | 
						|
	/* Set arg count, init pointers to vector and string tables. */
 | 
						|
	* (size_t *) frame = argc;
 | 
						|
	vp = (char **) (frame + sizeof(argc));
 | 
						|
	sp = frame + string_off;
 | 
						|
 | 
						|
	/* Load the argument vector and strings. */
 | 
						|
	for (ap= argv; *ap != NULL; ap++) {
 | 
						|
		*vp++= (char *) (sp - frame);
 | 
						|
		n= strlen(*ap) + 1;
 | 
						|
		memcpy(sp, *ap, n);
 | 
						|
		sp+= n;
 | 
						|
	}
 | 
						|
	*vp++= NULL;
 | 
						|
 | 
						|
#if 0
 | 
						|
	/* Load the environment vector and strings. */
 | 
						|
	for (ep= envp; *ep != NULL; ep++) {
 | 
						|
		*vp++= (char *) (sp - frame);
 | 
						|
		n= strlen(*ep) + 1;
 | 
						|
		memcpy(sp, *ep, n);
 | 
						|
		sp+= n;
 | 
						|
	}
 | 
						|
#endif
 | 
						|
	*vp++= NULL;
 | 
						|
 | 
						|
	/* Padding. */
 | 
						|
	while (sp < frame + frame_size) *sp++= 0;
 | 
						|
 | 
						|
	(progname=strrchr(argv[0], '/')) ? progname++ : (progname=argv[0]);
 | 
						|
	r = do_exec(proc_e, exec, exec_len, progname, frame, frame_size);
 | 
						|
 | 
						|
	/* Return the memory used for the frame and exit. */
 | 
						|
	free(frame);
 | 
						|
	return r;
 | 
						|
}
 | 
						|
 | 
						|
static int do_exec(int proc_e, char *exec, size_t exec_len, char *progname,
 | 
						|
	char *frame, int frame_len)
 | 
						|
{
 | 
						|
	int r;
 | 
						|
	int hdrlen, sep_id, load_text, allow_setuid;
 | 
						|
	int need_restart, error;
 | 
						|
	vir_bytes stack_top, vsp;
 | 
						|
	vir_bytes text_bytes, data_bytes, bss_bytes, pc;
 | 
						|
	phys_bytes tot_bytes;
 | 
						|
	off_t off;
 | 
						|
	uid_t new_uid;
 | 
						|
	gid_t new_gid;
 | 
						|
 | 
						|
	need_restart= 0;
 | 
						|
	error= 0;
 | 
						|
 | 
						|
	/* Read the file header and extract the segment sizes. */
 | 
						|
	r = read_header(exec, exec_len, &sep_id,
 | 
						|
		&text_bytes, &data_bytes, &bss_bytes, 
 | 
						|
		&tot_bytes, &pc, &hdrlen);
 | 
						|
	if (r != OK)
 | 
						|
	{
 | 
						|
		printf("do_exec: read_header failed\n");
 | 
						|
		error= r;
 | 
						|
		goto fail;
 | 
						|
	}
 | 
						|
	need_restart= 1;
 | 
						|
 | 
						|
	new_uid= getuid();
 | 
						|
	new_gid= getgid();
 | 
						|
	/* XXX what should we use to identify the executable? */
 | 
						|
	r= exec_newmem(proc_e, text_bytes, data_bytes, bss_bytes, tot_bytes,
 | 
						|
		frame_len, sep_id, 0 /*dev*/, proc_e /*inum*/, 0 /*ctime*/, 
 | 
						|
		progname, new_uid, new_gid, &stack_top, &load_text,
 | 
						|
		&allow_setuid);
 | 
						|
	if (r != OK)
 | 
						|
	{
 | 
						|
		printf("do_exec: exec_newmap failed: %d\n", r);
 | 
						|
		error= r;
 | 
						|
		goto fail;
 | 
						|
	}
 | 
						|
 | 
						|
	/* Patch up stack and copy it from RS to new core image. */
 | 
						|
	vsp = stack_top;
 | 
						|
	vsp -= frame_len;
 | 
						|
	patch_ptr(frame, vsp);
 | 
						|
	r = sys_datacopy(SELF, (vir_bytes) frame,
 | 
						|
		proc_e, (vir_bytes) vsp, (phys_bytes)frame_len);
 | 
						|
	if (r != OK) {
 | 
						|
		printf("RS: stack_top is 0x%lx; tried to copy to 0x%lx in %d\n",
 | 
						|
			stack_top, vsp, proc_e);
 | 
						|
		printf("do_exec: copying out new stack failed: %d\n", r);
 | 
						|
		error= r;
 | 
						|
		goto fail;
 | 
						|
	}
 | 
						|
 | 
						|
	off = hdrlen;
 | 
						|
 | 
						|
	/* Read in text and data segments. */
 | 
						|
	if (load_text) {
 | 
						|
		r= read_seg(exec, exec_len, off, proc_e, T, text_bytes);
 | 
						|
		if (r != OK)
 | 
						|
		{
 | 
						|
			printf("do_exec: read_seg failed: %d\n", r);
 | 
						|
			error= r;
 | 
						|
			goto fail;
 | 
						|
		}
 | 
						|
	}
 | 
						|
	else
 | 
						|
		printf("do_exec: not loading text segment\n");
 | 
						|
 | 
						|
	off += text_bytes;
 | 
						|
	r= read_seg(exec, exec_len, off, proc_e, D, data_bytes);
 | 
						|
	if (r != OK)
 | 
						|
	{
 | 
						|
		printf("do_exec: read_seg failed: %d\n", r);
 | 
						|
		error= r;
 | 
						|
		goto fail;
 | 
						|
	}
 | 
						|
 | 
						|
	return exec_restart(proc_e, OK, pc);
 | 
						|
 | 
						|
fail:
 | 
						|
	printf("do_exec(fail): error = %d\n", error);
 | 
						|
	if (need_restart)
 | 
						|
               exec_restart(proc_e, error, pc);
 | 
						|
 | 
						|
	return error;
 | 
						|
}
 | 
						|
 | 
						|
/*===========================================================================*
 | 
						|
 *				exec_newmem				     *
 | 
						|
 *===========================================================================*/
 | 
						|
PRIVATE int exec_newmem(
 | 
						|
  int proc_e,
 | 
						|
  vir_bytes text_bytes,
 | 
						|
  vir_bytes data_bytes,
 | 
						|
  vir_bytes bss_bytes,
 | 
						|
  vir_bytes tot_bytes,
 | 
						|
  vir_bytes frame_len,
 | 
						|
  int sep_id,
 | 
						|
  dev_t st_dev,
 | 
						|
  ino_t st_ino,
 | 
						|
  time_t st_ctime,
 | 
						|
  char *progname,
 | 
						|
  int new_uid,
 | 
						|
  int new_gid,
 | 
						|
  vir_bytes *stack_topp,
 | 
						|
  int *load_textp,
 | 
						|
  int *allow_setuidp
 | 
						|
)
 | 
						|
{
 | 
						|
	int r;
 | 
						|
	struct exec_newmem e;
 | 
						|
	message m;
 | 
						|
 | 
						|
	e.text_bytes= text_bytes;
 | 
						|
	e.data_bytes= data_bytes;
 | 
						|
	e.bss_bytes= bss_bytes;
 | 
						|
	e.tot_bytes= tot_bytes;
 | 
						|
	e.args_bytes= frame_len;
 | 
						|
	e.sep_id= sep_id;
 | 
						|
	e.st_dev= st_dev;
 | 
						|
	e.st_ino= st_ino;
 | 
						|
	e.st_ctime= st_ctime;
 | 
						|
	e.new_uid= new_uid;
 | 
						|
	e.new_gid= new_gid;
 | 
						|
	strncpy(e.progname, progname, sizeof(e.progname)-1);
 | 
						|
	e.progname[sizeof(e.progname)-1]= '\0';
 | 
						|
 | 
						|
	m.m_type= EXEC_NEWMEM;
 | 
						|
	m.EXC_NM_PROC= proc_e;
 | 
						|
	m.EXC_NM_PTR= (char *)&e;
 | 
						|
	r= sendrec(PM_PROC_NR, &m);
 | 
						|
	if (r != OK)
 | 
						|
		return r;
 | 
						|
#if 0
 | 
						|
	printf("exec_newmem: r = %d, m_type = %d\n", r, m.m_type);
 | 
						|
#endif
 | 
						|
	*stack_topp= m.m1_i1;
 | 
						|
	*load_textp= !!(m.m1_i2 & EXC_NM_RF_LOAD_TEXT);
 | 
						|
	*allow_setuidp= !!(m.m1_i2 & EXC_NM_RF_ALLOW_SETUID);
 | 
						|
#if 0
 | 
						|
	printf("RS: exec_newmem: stack_top = 0x%x\n", *stack_topp);
 | 
						|
	printf("RS: exec_newmem: load_text = %d\n", *load_textp);
 | 
						|
#endif
 | 
						|
	return m.m_type;
 | 
						|
}
 | 
						|
 | 
						|
 | 
						|
/*===========================================================================*
 | 
						|
 *				exec_restart				     *
 | 
						|
 *===========================================================================*/
 | 
						|
PRIVATE int exec_restart(proc_e, result, pc)
 | 
						|
int proc_e;
 | 
						|
int result;
 | 
						|
vir_bytes pc;
 | 
						|
{
 | 
						|
	int r;
 | 
						|
	message m;
 | 
						|
 | 
						|
	m.m_type= EXEC_RESTART;
 | 
						|
	m.EXC_RS_PROC= proc_e;
 | 
						|
	m.EXC_RS_RESULT= result;
 | 
						|
	m.EXC_RS_PC= (void*)pc;
 | 
						|
	r= sendrec(PM_PROC_NR, &m);
 | 
						|
	if (r != OK)
 | 
						|
		return r;
 | 
						|
	return m.m_type;
 | 
						|
}
 | 
						|
 | 
						|
 | 
						|
/*===========================================================================*
 | 
						|
 *				read_header				     *
 | 
						|
 *===========================================================================*/
 | 
						|
PRIVATE int read_header(exec, exec_len, sep_id, text_bytes, data_bytes,
 | 
						|
	bss_bytes, tot_bytes, pc, hdrlenp)
 | 
						|
char *exec;			/* executable image */
 | 
						|
size_t exec_len;		/* size of the image */
 | 
						|
int *sep_id;			/* true iff sep I&D */
 | 
						|
vir_bytes *text_bytes;		/* place to return text size */
 | 
						|
vir_bytes *data_bytes;		/* place to return initialized data size */
 | 
						|
vir_bytes *bss_bytes;		/* place to return bss size */
 | 
						|
phys_bytes *tot_bytes;		/* place to return total size */
 | 
						|
vir_bytes *pc;			/* program entry point (initial PC) */
 | 
						|
int *hdrlenp;
 | 
						|
{
 | 
						|
/* Read the header and extract the text, data, bss and total sizes from it. */
 | 
						|
  struct exec hdr;		/* a.out header is read in here */
 | 
						|
 | 
						|
  /* Read the header and check the magic number.  The standard MINIX header 
 | 
						|
   * is defined in <a.out.h>.  It consists of 8 chars followed by 6 longs.
 | 
						|
   * Then come 4 more longs that are not used here.
 | 
						|
   *	Byte 0: magic number 0x01
 | 
						|
   *	Byte 1: magic number 0x03
 | 
						|
   *	Byte 2: normal = 0x10 (not checked, 0 is OK), separate I/D = 0x20
 | 
						|
   *	Byte 3: CPU type, Intel 16 bit = 0x04, Intel 32 bit = 0x10, 
 | 
						|
   *            Motorola = 0x0B, Sun SPARC = 0x17
 | 
						|
   *	Byte 4: Header length = 0x20
 | 
						|
   *	Bytes 5-7 are not used.
 | 
						|
   *
 | 
						|
   *	Now come the 6 longs
 | 
						|
   *	Bytes  8-11: size of text segments in bytes
 | 
						|
   *	Bytes 12-15: size of initialized data segment in bytes
 | 
						|
   *	Bytes 16-19: size of bss in bytes
 | 
						|
   *	Bytes 20-23: program entry point
 | 
						|
   *	Bytes 24-27: total memory allocated to program (text, data + stack)
 | 
						|
   *	Bytes 28-31: size of symbol table in bytes
 | 
						|
   * The longs are represented in a machine dependent order,
 | 
						|
   * little-endian on the 8088, big-endian on the 68000.
 | 
						|
   * The header is followed directly by the text and data segments, and the 
 | 
						|
   * symbol table (if any). The sizes are given in the header. Only the 
 | 
						|
   * text and data segments are copied into memory by exec. The header is 
 | 
						|
   * used here only. The symbol table is for the benefit of a debugger and 
 | 
						|
   * is ignored here.
 | 
						|
   */
 | 
						|
  if (exec_len < sizeof(hdr)) return(ENOEXEC);
 | 
						|
 | 
						|
  memcpy(&hdr, exec, sizeof(hdr));
 | 
						|
 | 
						|
  /* Check magic number, cpu type, and flags. */
 | 
						|
  if (BADMAG(hdr)) return(ENOEXEC);
 | 
						|
#if (CHIP == INTEL && _WORD_SIZE == 2)
 | 
						|
  if (hdr.a_cpu != A_I8086) return(ENOEXEC);
 | 
						|
#endif
 | 
						|
#if (CHIP == INTEL && _WORD_SIZE == 4)
 | 
						|
  if (hdr.a_cpu != A_I80386) return(ENOEXEC);
 | 
						|
#endif
 | 
						|
  if ((hdr.a_flags & ~(A_NSYM | A_EXEC | A_SEP)) != 0) return(ENOEXEC);
 | 
						|
 | 
						|
  *sep_id = !!(hdr.a_flags & A_SEP);	    /* separate I & D or not */
 | 
						|
 | 
						|
  /* Get text and data sizes. */
 | 
						|
  *text_bytes = (vir_bytes) hdr.a_text;	/* text size in bytes */
 | 
						|
  *data_bytes = (vir_bytes) hdr.a_data;	/* data size in bytes */
 | 
						|
  *bss_bytes  = (vir_bytes) hdr.a_bss;	/* bss size in bytes */
 | 
						|
  *tot_bytes  = hdr.a_total;		/* total bytes to allocate for prog */
 | 
						|
  if (*tot_bytes == 0) return(ENOEXEC);
 | 
						|
 | 
						|
  if (!*sep_id) {
 | 
						|
	/* If I & D space is not separated, it is all considered data. Text=0*/
 | 
						|
	*data_bytes += *text_bytes;
 | 
						|
	*text_bytes = 0;
 | 
						|
  }
 | 
						|
  *pc = hdr.a_entry;	/* initial address to start execution */
 | 
						|
  *hdrlenp = hdr.a_hdrlen & BYTE;		/* header length */
 | 
						|
 | 
						|
  return(OK);
 | 
						|
}
 | 
						|
 | 
						|
/*===========================================================================*
 | 
						|
 *				patch_ptr				     *
 | 
						|
 *===========================================================================*/
 | 
						|
PRIVATE void patch_ptr(stack, base)
 | 
						|
char stack[ARG_MAX];		/* pointer to stack image within PM */
 | 
						|
vir_bytes base;			/* virtual address of stack base inside user */
 | 
						|
{
 | 
						|
/* When doing an exec(name, argv, envp) call, the user builds up a stack
 | 
						|
 * image with arg and env pointers relative to the start of the stack.  Now
 | 
						|
 * these pointers must be relocated, since the stack is not positioned at
 | 
						|
 * address 0 in the user's address space.
 | 
						|
 */
 | 
						|
 | 
						|
  char **ap, flag;
 | 
						|
  vir_bytes v;
 | 
						|
 | 
						|
  flag = 0;			/* counts number of 0-pointers seen */
 | 
						|
  ap = (char **) stack;		/* points initially to 'nargs' */
 | 
						|
  ap++;				/* now points to argv[0] */
 | 
						|
  while (flag < 2) {
 | 
						|
	if (ap >= (char **) &stack[ARG_MAX]) return;	/* too bad */
 | 
						|
	if (*ap != NULL) {
 | 
						|
		v = (vir_bytes) *ap;	/* v is relative pointer */
 | 
						|
		v += base;		/* relocate it */
 | 
						|
		*ap = (char *) v;	/* put it back */
 | 
						|
	} else {
 | 
						|
		flag++;
 | 
						|
	}
 | 
						|
	ap++;
 | 
						|
  }
 | 
						|
}
 | 
						|
 | 
						|
/*===========================================================================*
 | 
						|
 *				read_seg				     *
 | 
						|
 *===========================================================================*/
 | 
						|
PRIVATE int read_seg(exec, exec_len, off, proc_e, seg, seg_bytes)
 | 
						|
char *exec;			/* executable image */
 | 
						|
size_t exec_len;		/* size of the image */
 | 
						|
off_t off;			/* offset in file */
 | 
						|
int proc_e;			/* process number (endpoint) */
 | 
						|
int seg;			/* T, D, or S */
 | 
						|
phys_bytes seg_bytes;		/* how much is to be transferred? */
 | 
						|
{
 | 
						|
/*
 | 
						|
 * The byte count on read is usually smaller than the segment count, because
 | 
						|
 * a segment is padded out to a click multiple, and the data segment is only
 | 
						|
 * partially initialized.
 | 
						|
 */
 | 
						|
 | 
						|
  int r;
 | 
						|
 | 
						|
  if (off+seg_bytes > exec_len) return ENOEXEC;
 | 
						|
  r= sys_vircopy(SELF, D, (vir_bytes)exec+off, proc_e, seg, 0, seg_bytes);
 | 
						|
  return r;
 | 
						|
}
 | 
						|
 |