Page MenuHomeFreeBSD

rtld: When relocating, map without PROT_EXEC
ClosedPublic

Authored by emaste on Jan 4 2021, 5:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Sep 6, 8:50 AM
Unknown Object (File)
Sat, Sep 5, 10:18 AM
Unknown Object (File)
Fri, Sep 4, 1:09 PM
Unknown Object (File)
Thu, Sep 3, 9:28 PM
Unknown Object (File)
Thu, Sep 3, 1:29 PM
Unknown Object (File)
Thu, Sep 3, 9:24 AM
Unknown Object (File)
Wed, Sep 2, 11:03 PM
Unknown Object (File)
Wed, Aug 26, 3:15 AM
Subscribers

Details

Summary

This makes text segment relocation work under W^X.


I have encountered this when loading lucet-compiled shared objects with W^X (D24933).

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

libexec/rtld-elf/rtld.c
2986–2987

maybe clearer if we incorporate the PROT_WRITE part from above?

something like

prot = convert_prot(ph->p_flags);
if (before)
        prot = prot & ~PROT_EXEC | PROT_WRITE;
libexec/rtld-elf/rtld.c
2986–2987

There is no much reason to use convert_prot() in'before' case at all, then. Only PF_R survives. It can be

prot = before ? (PROT_READ | PROT_WRITE) : convert_prot(ph->p_flags);
emaste updated this revision to Diff 81672.
emaste edited reviewers, added: val_packett.cool; removed: emaste.

Update per kib's suggestion

This revision is now accepted and ready to land.Jan 5 2021, 3:04 PM
This revision was automatically updated to reflect the committed changes.