Differential D18554 Diff 52175 head/usr.sbin/uefisign/pe.c

Changeset View

Standalone View

head/usr.sbin/uefisign/pe.c

Show First 20 Lines • Show All 50 Lines • ▼ Show 20 Lines
#include "uefisign.h"		#include "uefisign.h"

#ifndef CTASSERT		#ifndef CTASSERT
#define CTASSERT(x) _CTASSERT(x, __LINE__)		#define CTASSERT(x) _CTASSERT(x, __LINE__)
#define _CTASSERT(x, y) __CTASSERT(x, y)		#define _CTASSERT(x, y) __CTASSERT(x, y)
#define __CTASSERT(x, y) typedef char __assert_ ## y [(x) ? 1 : -1]		#define __CTASSERT(x, y) typedef char __assert_ ## y [(x) ? 1 : -1]
#endif		#endif

		#define PE_ALIGMENT_SIZE 8

struct mz_header {		struct mz_header {
uint8_t mz_signature[2];		uint8_t mz_signature[2];
uint8_t mz_dont_care[58];		uint8_t mz_dont_care[58];
uint16_t mz_lfanew;		uint16_t mz_lfanew;
} __attribute__((packed));		} __attribute__((packed));

struct coff_header {		struct coff_header {
uint8_t coff_dont_care[2];		uint8_t coff_dont_care[2];
▲ Show 20 Lines • Show All 426 Lines • ▼ Show 20 Lines	parse(struct executable *x)
mz = (struct mz_header *)x->x_buf;		mz = (struct mz_header *)x->x_buf;
if (mz->mz_signature[0] != 'M' \|\| mz->mz_signature[1] != 'Z')		if (mz->mz_signature[0] != 'M' \|\| mz->mz_signature[1] != 'Z')
errx(1, "MZ header not found");		errx(1, "MZ header not found");

return (parse_pe(x, mz->mz_lfanew));		return (parse_pe(x, mz->mz_lfanew));
}		}

static off_t		static off_t
append(struct executable x, void ptr, size_t len)		append(struct executable x, void ptr, size_t len, size_t aligment)
{		{
off_t off;		off_t off;

/*
* XXX: Alignment.
*/
off = x->x_len;		off = x->x_len;
x->x_buf = realloc(x->x_buf, x->x_len + len);		x->x_buf = realloc(x->x_buf, x->x_len + len + aligment);
if (x->x_buf == NULL)		if (x->x_buf == NULL)
err(1, "realloc");		err(1, "realloc");
memcpy(x->x_buf + x->x_len, ptr, len);		memcpy(x->x_buf + x->x_len, ptr, len);
x->x_len += len;		memset(x->x_buf + x->x_len + len, 0, aligment);
		x->x_len += len + aligment;

return (off);		return (off);
}		}

void		void
update(struct executable *x)		update(struct executable *x)
{		{
uint32_t checksum;		uint32_t checksum;
struct pe_certificate *pc;		struct pe_certificate *pc;
struct pe_directory_entry pde;		struct pe_directory_entry pde;
size_t pc_len;		size_t pc_len;
		size_t pc_aligment;
off_t pc_off;		off_t pc_off;

pc_len = sizeof(*pc) + x->x_signature_len;		pc_len = sizeof(*pc) + x->x_signature_len;
pc = calloc(1, pc_len);		pc = calloc(1, pc_len);
if (pc == NULL)		if (pc == NULL)
err(1, "calloc");		err(1, "calloc");

		if (pc_len % PE_ALIGMENT_SIZE > 0)
		pc_aligment = PE_ALIGMENT_SIZE - (pc_len % PE_ALIGMENT_SIZE);
		else
		pc_aligment = 0;

#if 0		#if 0
/*		/*
* Note that pc_len is the length of pc_certificate,		* Note that pc_len is the length of pc_certificate,
* not the whole structure.		* not the whole structure.
*		*
* XXX: That's what the spec says - but it breaks at least		* XXX: That's what the spec says - but it breaks at least
* sbverify and "pesign -S", so the spec is probably wrong.		* sbverify and "pesign -S", so the spec is probably wrong.
*/		*/
pc->pc_len = x->x_signature_len;		pc->pc_len = x->x_signature_len;
#else		#else
pc->pc_len = pc_len;		pc->pc_len = pc_len;
#endif		#endif
pc->pc_revision = PE_CERTIFICATE_REVISION;		pc->pc_revision = PE_CERTIFICATE_REVISION;
pc->pc_type = PE_CERTIFICATE_TYPE;		pc->pc_type = PE_CERTIFICATE_TYPE;
memcpy(&pc->pc_signature, x->x_signature, x->x_signature_len);		memcpy(&pc->pc_signature, x->x_signature, x->x_signature_len);

pc_off = append(x, pc, pc_len);		pc_off = append(x, pc, pc_len, pc_aligment);
#if 0		#if 0
printf("added signature chunk at offset %zd, len %zd\n",		printf("added signature chunk at offset %zd, len %zd\n",
pc_off, pc_len);		pc_off, pc_len);
#endif		#endif

free(pc);		free(pc);

pde.pde_rva = pc_off;		pde.pde_rva = pc_off;
pde.pde_size = pc_len;		pde.pde_size = pc_len + pc_aligment;
memcpy(x->x_buf + x->x_certificate_entry_off, &pde, sizeof(pde));		memcpy(x->x_buf + x->x_certificate_entry_off, &pde, sizeof(pde));

checksum = compute_checksum(x);		checksum = compute_checksum(x);
assert(sizeof(checksum) == x->x_checksum_len);		assert(sizeof(checksum) == x->x_checksum_len);
memcpy(x->x_buf + x->x_checksum_off, &checksum, sizeof(checksum));		memcpy(x->x_buf + x->x_checksum_off, &checksum, sizeof(checksum));
#if 0		#if 0
printf("new checksum 0x%x\n", checksum);		printf("new checksum 0x%x\n", checksum);
#endif		#endif
}		}