1 /* -*- mode: C++; c-basic-offset: 4; tab-width: 4 -*-
3 * Copyright (c) 2004-2010 Apple Inc. All rights reserved.
5 * @APPLE_LICENSE_HEADER_START@
7 * This file contains Original Code and/or Modifications of Original Code
8 * as defined in and that are subject to the Apple Public Source License
9 * Version 2.0 (the 'License'). You may not use this file except in
10 * compliance with the License. Please obtain a copy of the License at
11 * http://www.opensource.apple.com/apsl/ and read it before using this
14 * The Original Code and all software distributed under the License are
15 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
16 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
17 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
19 * Please see the License for the specific language governing rights and
20 * limitations under the License.
22 * @APPLE_LICENSE_HEADER_END@
25 // work around until conformance work is complete rdar://problem/4508801
34 #include <sys/types.h>
35 #include <sys/fcntl.h>
38 #include <mach/mach.h>
39 #include <mach/thread_status.h>
40 #include <mach-o/loader.h>
41 #include <mach-o/reloc.h>
42 #include <mach-o/nlist.h>
43 #include <sys/sysctl.h>
44 #include <libkern/OSAtomic.h>
45 #include <libkern/OSCacheControl.h>
48 #include <mach-o/x86_64/reloc.h>
51 #include <mach-o/arm/reloc.h>
54 #include "ImageLoaderMachOClassic.h"
55 #include "mach-o/dyld_images.h"
58 extern "C" void stub_binding_helper_i386_old();
62 #define POINTER_RELOC X86_64_RELOC_UNSIGNED
64 #define POINTER_RELOC GENERIC_RELOC_VANILLA
68 // relocation_info.r_length field has value 3 for 64-bit executables and value 2 for 32-bit executables
71 #define LC_SEGMENT_COMMAND LC_SEGMENT_64
72 #define LC_ROUTINES_COMMAND LC_ROUTINES_64
73 struct macho_segment_command
: public segment_command_64
{};
74 struct macho_section
: public section_64
{};
75 struct macho_routines_command
: public routines_command_64
{};
78 #define LC_SEGMENT_COMMAND LC_SEGMENT
79 #define LC_ROUTINES_COMMAND LC_ROUTINES
80 struct macho_segment_command
: public segment_command
{};
81 struct macho_section
: public section
{};
82 struct macho_routines_command
: public routines_command
{};
88 // create image for main executable
89 ImageLoaderMachOClassic
* ImageLoaderMachOClassic::instantiateMainExecutable(const macho_header
* mh
, uintptr_t slide
, const char* path
,
90 unsigned int segCount
, unsigned int libCount
, const LinkContext
& context
)
92 ImageLoaderMachOClassic
* image
= ImageLoaderMachOClassic::instantiateStart(mh
, path
, segCount
, libCount
);
94 // set slide for PIE programs
95 image
->setSlide(slide
);
97 // for PIE record end of program, to know where to start loading dylibs
99 fgNextPIEDylibAddress
= (uintptr_t)image
->getEnd();
101 image
->disableCoverageCheck();
102 image
->instantiateFinish(context
);
103 image
->setMapped(context
);
106 // kernel may have mapped in __IMPORT segment read-only, we need it read/write to do binding
107 if ( image
->fReadOnlyImportSegment
) {
108 for(unsigned int i
=0; i
< image
->fSegmentsCount
; ++i
) {
109 if ( image
->segIsReadOnlyImport(i
) )
110 image
->segMakeWritable(i
, context
);
115 if ( context
.verboseMapping
) {
116 dyld::log("dyld: Main executable mapped %s\n", path
);
117 for(unsigned int i
=0, e
=image
->segmentCount(); i
< e
; ++i
) {
118 const char* name
= image
->segName(i
);
119 if ( (strcmp(name
, "__PAGEZERO") == 0) || (strcmp(name
, "__UNIXSTACK") == 0) )
120 dyld::log("%18s at 0x%08lX->0x%08lX\n", name
, image
->segPreferredLoadAddress(i
), image
->segPreferredLoadAddress(i
)+image
->segSize(i
));
122 dyld::log("%18s at 0x%08lX->0x%08lX\n", name
, image
->segActualLoadAddress(i
), image
->segActualEndAddress(i
));
129 // create image by mapping in a mach-o file
130 ImageLoaderMachOClassic
* ImageLoaderMachOClassic::instantiateFromFile(const char* path
, int fd
, const uint8_t* fileData
, size_t lenFileData
,
131 uint64_t offsetInFat
, uint64_t lenInFat
, const struct stat
& info
,
132 unsigned int segCount
, unsigned int libCount
,
133 const struct linkedit_data_command
* codeSigCmd
, const LinkContext
& context
)
135 ImageLoaderMachOClassic
* image
= ImageLoaderMachOClassic::instantiateStart((macho_header
*)fileData
, path
, segCount
, libCount
);
137 // record info about file
138 image
->setFileInfo(info
.st_dev
, info
.st_ino
, info
.st_mtime
);
140 // if this image is code signed, let kernel validate signature before mapping any pages from image
141 image
->loadCodeSignature(codeSigCmd
, fd
, offsetInFat
, context
);
143 // Validate that first data we read with pread actually matches with code signature
144 image
->validateFirstPages(codeSigCmd
, fd
, fileData
, lenFileData
, offsetInFat
, context
);
147 image
->mapSegmentsClassic(fd
, offsetInFat
, lenInFat
, info
.st_size
, context
);
150 image
->instantiateFinish(context
);
152 // if path happens to be same as in LC_DYLIB_ID load command use that, otherwise malloc a copy of the path
153 const char* installName
= image
->getInstallPath();
154 if ( (installName
!= NULL
) && (strcmp(installName
, path
) == 0) && (path
[0] == '/') )
155 image
->setPathUnowned(installName
);
156 else if ( (path
[0] != '/') || (strstr(path
, "../") != NULL
) ) {
157 // rdar://problem/10733082 Fix up @path based paths during introspection
158 // rdar://problem/5135363 turn relative paths into absolute paths so gdb, Symbolication can later find them
159 char realPath
[MAXPATHLEN
];
160 if ( fcntl(fd
, F_GETPATH
, realPath
) == 0 )
161 image
->setPaths(path
, realPath
);
163 image
->setPath(path
);
166 image
->setPath(path
);
168 // make sure path is stable before recording in dyld_all_image_infos
169 image
->setMapped(context
);
171 // pre-fetch content of __DATA segment for faster launches
172 // don't do this on prebound images or if prefetching is disabled
173 if ( !context
.preFetchDisabled
&& !image
->isPrebindable())
174 image
->preFetchDATA(fd
, offsetInFat
, context
);
178 // ImageLoader::setMapped() can throw an exception to block loading of image
179 // <rdar://problem/6169686> Leaked fSegmentsArray and image segments during failed dlopen_preflight
187 // create image by using cached mach-o file
188 ImageLoaderMachOClassic
* ImageLoaderMachOClassic::instantiateFromCache(const macho_header
* mh
, const char* path
, long slide
, const struct stat
& info
,
189 unsigned int segCount
, unsigned int libCount
, const LinkContext
& context
)
191 ImageLoaderMachOClassic
* image
= ImageLoaderMachOClassic::instantiateStart(mh
, path
, segCount
, libCount
);
193 // record info about file
194 image
->setFileInfo(info
.st_dev
, info
.st_ino
, info
.st_mtime
);
196 // remember this is from shared cache and cannot be unloaded
197 image
->fInSharedCache
= true;
198 image
->setNeverUnload();
199 image
->disableCoverageCheck();
201 // segments already mapped in cache
202 if ( context
.verboseMapping
) {
203 dyld::log("dyld: Using shared cached for %s\n", path
);
204 for(unsigned int i
=0, e
=image
->segmentCount(); i
< e
; ++i
) {
205 dyld::log("%18s at 0x%08lX->0x%08lX\n", image
->segName(i
), image
->segActualLoadAddress(i
), image
->segActualEndAddress(i
));
209 image
->instantiateFinish(context
);
210 image
->setMapped(context
);
213 // ImageLoader::setMapped() can throw an exception to block loading of image
214 // <rdar://problem/6169686> Leaked fSegmentsArray and image segments during failed dlopen_preflight
222 // create image by copying an in-memory mach-o file
223 ImageLoaderMachOClassic
* ImageLoaderMachOClassic::instantiateFromMemory(const char* moduleName
, const macho_header
* mh
, uint64_t len
,
224 unsigned int segCount
, unsigned int libCount
, const LinkContext
& context
)
226 ImageLoaderMachOClassic
* image
= ImageLoaderMachOClassic::instantiateStart(mh
, moduleName
, segCount
, libCount
);
229 if ( mh
->filetype
== MH_EXECUTE
)
230 throw "can't load another MH_EXECUTE";
233 image
->ImageLoaderMachO::mapSegments((const void*)mh
, len
, context
);
235 // for compatibility, never unload dylibs loaded from memory
236 image
->setNeverUnload();
238 image
->disableCoverageCheck();
240 // bundle loads need path copied
241 if ( moduleName
!= NULL
)
242 image
->setPath(moduleName
);
244 image
->instantiateFinish(context
);
245 image
->setMapped(context
);
248 // ImageLoader::setMapped() can throw an exception to block loading of image
249 // <rdar://problem/6169686> Leaked fSegmentsArray and image segments during failed dlopen_preflight
258 ImageLoaderMachOClassic::ImageLoaderMachOClassic(const macho_header
* mh
, const char* path
,
259 unsigned int segCount
, uint32_t segOffsets
[], unsigned int libCount
)
260 : ImageLoaderMachO(mh
, path
, segCount
, segOffsets
, libCount
), fStrings(NULL
), fSymbolTable(NULL
), fDynamicInfo(NULL
)
264 // construct ImageLoaderMachOClassic using "placement new" with SegmentMachO objects array at end
265 ImageLoaderMachOClassic
* ImageLoaderMachOClassic::instantiateStart(const macho_header
* mh
, const char* path
,
266 unsigned int segCount
, unsigned int libCount
)
268 size_t size
= sizeof(ImageLoaderMachOClassic
) + segCount
* sizeof(uint32_t) + libCount
* sizeof(ImageLoader
*);
269 ImageLoaderMachOClassic
* allocatedSpace
= static_cast<ImageLoaderMachOClassic
*>(malloc(size
));
270 if ( allocatedSpace
== NULL
)
271 throw "malloc failed";
272 uint32_t* segOffsets
= ((uint32_t*)(((uint8_t*)allocatedSpace
) + sizeof(ImageLoaderMachOClassic
)));
273 bzero(&segOffsets
[segCount
], libCount
*sizeof(void*)); // zero out lib array
274 return new (allocatedSpace
) ImageLoaderMachOClassic(mh
, path
, segCount
, segOffsets
, libCount
);
279 // common code to finish initializing object
280 void ImageLoaderMachOClassic::instantiateFinish(const LinkContext
& context
)
282 // now that segments are mapped in, get real fMachOData, fLinkEditBase, and fSlide
283 this->parseLoadCmds(context
);
286 ImageLoaderMachOClassic::~ImageLoaderMachOClassic()
288 // don't do clean up in ~ImageLoaderMachO() because virtual call to segmentCommandOffsets() won't work
292 uint32_t* ImageLoaderMachOClassic::segmentCommandOffsets() const
294 return ((uint32_t*)(((uint8_t*)this) + sizeof(ImageLoaderMachOClassic
)));
298 ImageLoader
* ImageLoaderMachOClassic::libImage(unsigned int libIndex
) const
300 const uintptr_t* images
= ((uintptr_t*)(((uint8_t*)this) + sizeof(ImageLoaderMachOClassic
) + fSegmentsCount
*sizeof(uint32_t)));
302 return (ImageLoader
*)(images
[libIndex
] & (-4));
305 bool ImageLoaderMachOClassic::libReExported(unsigned int libIndex
) const
307 const uintptr_t* images
= ((uintptr_t*)(((uint8_t*)this) + sizeof(ImageLoaderMachOClassic
) + fSegmentsCount
*sizeof(uint32_t)));
308 // re-export flag is low bit
309 return ((images
[libIndex
] & 1) != 0);
312 bool ImageLoaderMachOClassic::libIsUpward(unsigned int libIndex
) const
314 const uintptr_t* images
= ((uintptr_t*)(((uint8_t*)this) + sizeof(ImageLoaderMachOClassic
) + fSegmentsCount
*sizeof(uint32_t)));
315 // upward flag is second bit
316 return ((images
[libIndex
] & 2) != 0);
320 void ImageLoaderMachOClassic::setLibImage(unsigned int libIndex
, ImageLoader
* image
, bool reExported
, bool upward
)
322 uintptr_t* images
= ((uintptr_t*)(((uint8_t*)this) + sizeof(ImageLoaderMachOClassic
) + fSegmentsCount
*sizeof(uint32_t)));
323 uintptr_t value
= (uintptr_t)image
;
328 images
[libIndex
] = value
;
332 void ImageLoaderMachOClassic::setSymbolTableInfo(const macho_nlist
* symbols
, const char* strings
, const dysymtab_command
* dynSym
)
334 fSymbolTable
= symbols
;
336 fDynamicInfo
= dynSym
;
339 void ImageLoaderMachOClassic::prefetchLINKEDIT(const LinkContext
& context
)
341 // always prefetch a subrange of __LINKEDIT pages
342 uintptr_t symbolTableStart
= (uintptr_t)fSymbolTable
;
343 uintptr_t stringTableStart
= (uintptr_t)fStrings
;
345 // if image did not load at preferred address
346 if ( segPreferredLoadAddress(0) != (uintptr_t)fMachOData
) {
347 // local relocations will be processed, so start pre-fetch at local symbols
348 start
= (uintptr_t)fMachOData
+ fDynamicInfo
->locreloff
;
351 // otherwise start pre-fetch at global symbols section of symbol table
352 start
= symbolTableStart
+ fDynamicInfo
->iextdefsym
* sizeof(macho_nlist
);
354 // prefetch ends at end of last undefined string in string pool
355 uintptr_t end
= stringTableStart
;
356 if ( fDynamicInfo
->nundefsym
!= 0 )
357 end
+= fSymbolTable
[fDynamicInfo
->iundefsym
+fDynamicInfo
->nundefsym
-1].n_un
.n_strx
;
358 else if ( fDynamicInfo
->nextdefsym
!= 0 )
359 end
+= fSymbolTable
[fDynamicInfo
->iextdefsym
+fDynamicInfo
->nextdefsym
-1].n_un
.n_strx
;
361 // round to whole pages
362 start
= dyld_page_trunc(start
);
363 end
= dyld_page_round(end
);
365 // skip if there is only one page
366 if ( (end
-start
) > dyld_page_size
) {
367 madvise((void*)start
, end
-start
, MADV_WILLNEED
);
368 fgTotalBytesPreFetched
+= (end
-start
);
369 if ( context
.verboseMapping
) {
370 dyld::log("%18s prefetching 0x%0lX -> 0x%0lX\n", "__LINKEDIT", start
, end
-1);
376 #if SPLIT_SEG_DYLIB_SUPPORT
378 ImageLoaderMachOClassic::getExtraZeroFillEntriesCount()
380 // calculate mapping entries
381 unsigned int extraZeroFillEntries
= 0;
382 for(unsigned int i
=0; i
< fSegmentsCount
; ++i
) {
383 if ( segHasTrailingZeroFill(i
) )
384 ++extraZeroFillEntries
;
387 return extraZeroFillEntries
;
391 ImageLoaderMachOClassic::initMappingTable(uint64_t offsetInFat
,
392 shared_file_mapping_np
*mappingTable
)
394 for(unsigned int i
=0,entryIndex
=0; i
< fSegmentsCount
; ++i
, ++entryIndex
) {
395 shared_file_mapping_np
* entry
= &mappingTable
[entryIndex
];
396 entry
->sfm_address
= segActualLoadAddress(i
);
397 entry
->sfm_size
= segFileSize(i
);
398 entry
->sfm_file_offset
= segFileOffset(i
) + offsetInFat
;
399 entry
->sfm_init_prot
= VM_PROT_NONE
;
400 if ( !segUnaccessible(i
) ) {
401 if ( segExecutable(i
) )
402 entry
->sfm_init_prot
|= VM_PROT_EXECUTE
;
403 if ( segReadable(i
) )
404 entry
->sfm_init_prot
|= VM_PROT_READ
;
405 if ( segWriteable(i
) )
406 entry
->sfm_init_prot
|= VM_PROT_WRITE
| VM_PROT_COW
;
408 entry
->sfm_max_prot
= entry
->sfm_init_prot
;
409 if ( segHasTrailingZeroFill(i
) ) {
410 shared_file_mapping_np
* zfentry
= &mappingTable
[++entryIndex
];
411 zfentry
->sfm_address
= entry
->sfm_address
+ segFileSize(i
);
412 zfentry
->sfm_size
= segSize(i
) - segFileSize(i
);
413 zfentry
->sfm_file_offset
= 0;
414 zfentry
->sfm_init_prot
= entry
->sfm_init_prot
| VM_PROT_COW
| VM_PROT_ZF
;
415 zfentry
->sfm_max_prot
= zfentry
->sfm_init_prot
;
421 ImageLoaderMachOClassic::mapSplitSegDylibOutsideSharedRegion(int fd
,
422 uint64_t offsetInFat
,
425 const LinkContext
& context
)
427 uintptr_t nextAltLoadAddress
= 0;
428 const unsigned int segmentCount
= fSegmentsCount
;
429 const unsigned int extraZeroFillEntries
= getExtraZeroFillEntriesCount();
430 const unsigned int regionCount
= segmentCount
+extraZeroFillEntries
;
431 shared_file_mapping_np regions
[regionCount
];
432 initMappingTable(offsetInFat
, regions
);
434 // find space somewhere to allocate split seg
435 bool foundRoom
= false;
436 while ( ! foundRoom
) {
438 for(unsigned int i
=0; i
< regionCount
; ++i
) {
439 vm_address_t addr
= nextAltLoadAddress
+ regions
[i
].sfm_address
- regions
[0].sfm_address
;
440 vm_size_t size
= regions
[i
].sfm_size
;
441 r
= vm_allocate(mach_task_self(), &addr
, size
, false /*only this range*/);
443 // no room here, deallocate what has succeeded so far
444 for(unsigned int j
=0; j
< i
; ++j
) {
445 vm_address_t addr
= nextAltLoadAddress
+ regions
[j
].sfm_address
- regions
[0].sfm_address
;
446 vm_size_t size
= regions
[j
].sfm_size
;
447 (void)vm_deallocate(mach_task_self(), addr
, size
);
449 nextAltLoadAddress
+= 0x00100000; // skip ahead 1MB and try again
450 // skip over shared region
451 if ( (SHARED_REGION_BASE
<= nextAltLoadAddress
) && (nextAltLoadAddress
< (SHARED_REGION_BASE
+ SHARED_REGION_SIZE
)) )
452 nextAltLoadAddress
= (SHARED_REGION_BASE
+ SHARED_REGION_SIZE
);
453 if ( nextAltLoadAddress
> 0xFF000000 )
454 throw "can't map split seg anywhere";
461 // map in each region
462 uintptr_t slide
= nextAltLoadAddress
- regions
[0].sfm_address
;
463 this->setSlide(slide
);
464 for(unsigned int i
=0; i
< regionCount
; ++i
) {
465 if ( ((regions
[i
].sfm_init_prot
& VM_PROT_ZF
) != 0) || (regions
[i
].sfm_size
== 0) ) {
466 // nothing to mmap for zero-fills areas, they are just vm_allocated
469 void* mmapAddress
= (void*)(uintptr_t)(regions
[i
].sfm_address
+ slide
);
470 size_t size
= regions
[i
].sfm_size
;
472 if ( regions
[i
].sfm_init_prot
& VM_PROT_EXECUTE
)
473 protection
|= PROT_EXEC
;
474 if ( regions
[i
].sfm_init_prot
& VM_PROT_READ
)
475 protection
|= PROT_READ
;
476 if ( regions
[i
].sfm_init_prot
& VM_PROT_WRITE
)
477 protection
|= PROT_WRITE
;
478 off_t offset
= regions
[i
].sfm_file_offset
;
479 //dyld::log("mmap(%p, 0x%08lX, %s\n", mmapAddress, size, fPath);
480 mmapAddress
= mmap(mmapAddress
, size
, protection
, MAP_FIXED
| MAP_PRIVATE
, fd
, offset
);
481 if ( mmapAddress
== ((void*)(-1)) )
487 if ( context
.verboseMapping
) {
488 dyld::log("dyld: Mapping split-seg outside shared region, slid by 0x%08lX %s\n", this->fSlide
, this->getPath());
489 for(unsigned int segIndex
=0,entryIndex
=0; segIndex
< segmentCount
; ++segIndex
, ++entryIndex
){
490 const shared_file_mapping_np
* entry
= ®ions
[entryIndex
];
491 if ( (entry
->sfm_init_prot
& VM_PROT_ZF
) == 0 )
492 dyld::log("%18s at 0x%08lX->0x%08lX\n",
493 segName(segIndex
), segActualLoadAddress(segIndex
), segActualEndAddress(segIndex
)-1);
494 if ( entryIndex
< (regionCount
-1) ) {
495 const shared_file_mapping_np
* nextEntry
= ®ions
[entryIndex
+1];
496 if ( (nextEntry
->sfm_init_prot
& VM_PROT_ZF
) != 0 ) {
497 uint64_t segOffset
= nextEntry
->sfm_address
- entry
->sfm_address
;
498 dyld::log("%18s at 0x%08lX->0x%08lX (zerofill)\n",
499 segName(segIndex
), (uintptr_t)(segActualLoadAddress(segIndex
) + segOffset
), (uintptr_t)(segActualLoadAddress(segIndex
) + segOffset
+ nextEntry
->sfm_size
- 1));
508 #endif // SPLIT_SEG_DYLIB_SUPPORT
511 void ImageLoaderMachOClassic::mapSegmentsClassic(int fd
, uint64_t offsetInFat
, uint64_t lenInFat
, uint64_t fileLen
, const LinkContext
& context
)
513 // non-split segment libraries handled by super class
515 return ImageLoaderMachO::mapSegments(fd
, offsetInFat
, lenInFat
, fileLen
, context
);
517 #if SPLIT_SEG_SHARED_REGION_SUPPORT
518 // don't map split-seg dylibs into shared region if shared cache is in use
519 if ( ! context
.dyldLoadedAtSameAddressNeededBySharedCache
) {
520 // try to map into shared region at preferred address
521 if ( mapSplitSegDylibInfoSharedRegion(fd
, offsetInFat
, lenInFat
, fileLen
, context
) == 0)
524 // if there is a problem, fall into case where we map file somewhere outside the shared region
527 #if SPLIT_SEG_DYLIB_SUPPORT
528 // support old split-seg dylibs by mapping them where ever we find space
529 if ( mapSplitSegDylibOutsideSharedRegion(fd
, offsetInFat
, lenInFat
, fileLen
, context
) != 0 )
531 throw "mapping error";
535 #if SPLIT_SEG_SHARED_REGION_SUPPORT
536 static int _shared_region_map_np(int fd
, uint32_t count
, const shared_file_mapping_np mappings
[])
538 return syscall(295, fd
, count
, mappings
);
542 ImageLoaderMachOClassic::mapSplitSegDylibInfoSharedRegion(int fd
,
543 uint64_t offsetInFat
,
546 const LinkContext
& context
)
548 // build table of segments to map
549 const unsigned int segmentCount
= fSegmentsCount
;
550 const unsigned int extraZeroFillEntries
= getExtraZeroFillEntriesCount();
551 const unsigned int mappingTableCount
= segmentCount
+extraZeroFillEntries
;
552 shared_file_mapping_np mappingTable
[mappingTableCount
];
553 initMappingTable(offsetInFat
, mappingTable
);
555 // try to map it in shared
556 int r
= _shared_region_map_np(fd
, mappingTableCount
, mappingTable
);
558 this->setNeverUnload();
559 if ( context
.verboseMapping
) {
560 dyld::log("dyld: Mapping split-seg shared %s\n", this->getPath());
561 for(unsigned int segIndex
=0,entryIndex
=0; segIndex
< segmentCount
; ++segIndex
, ++entryIndex
){
562 const shared_file_mapping_np
* entry
= &mappingTable
[entryIndex
];
563 if ( (entry
->sfm_init_prot
& VM_PROT_ZF
) == 0 )
564 dyld::log("%18s at 0x%08lX->0x%08lX\n",
565 segName(segIndex
), segActualLoadAddress(segIndex
), segActualEndAddress(segIndex
)-1);
566 if ( entryIndex
< (mappingTableCount
-1) ) {
567 const shared_file_mapping_np
* nextEntry
= &mappingTable
[entryIndex
+1];
568 if ( (nextEntry
->sfm_init_prot
& VM_PROT_ZF
) != 0 ) {
569 uint64_t segOffset
= nextEntry
->sfm_address
- entry
->sfm_address
;
570 dyld::log("%18s at 0x%08lX->0x%08lX\n",
571 segName(segIndex
), (uintptr_t)(segActualLoadAddress(segIndex
) + segOffset
),
572 (uintptr_t)(segActualLoadAddress(segIndex
) + segOffset
+ nextEntry
->sfm_size
- 1));
582 #endif // SPLIT_SEG_SHARED_REGION_SUPPORT
584 // test if this image is re-exported through parent (the image that loaded this one)
585 bool ImageLoaderMachOClassic::isSubframeworkOf(const LinkContext
& context
, const ImageLoader
* parent
) const
588 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
589 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
590 const struct load_command
* cmd
= cmds
;
591 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
592 if (cmd
->cmd
== LC_SUB_FRAMEWORK
) {
593 const struct sub_framework_command
* subf
= (struct sub_framework_command
*)cmd
;
594 const char* exportThruName
= (char*)cmd
+ subf
->umbrella
.offset
;
595 // need to match LC_SUB_FRAMEWORK string against the leaf name of the install location of parent...
596 const char* parentInstallPath
= parent
->getInstallPath();
597 if ( parentInstallPath
!= NULL
) {
598 const char* lastSlash
= strrchr(parentInstallPath
, '/');
599 if ( lastSlash
!= NULL
) {
600 if ( strcmp(&lastSlash
[1], exportThruName
) == 0 )
602 if ( context
.imageSuffix
!= NULL
) {
603 // when DYLD_IMAGE_SUFFIX is used, lastSlash string needs imageSuffix removed from end
604 char reexportAndSuffix
[strlen(context
.imageSuffix
)+strlen(exportThruName
)+1];
605 strcpy(reexportAndSuffix
, exportThruName
);
606 strcat(reexportAndSuffix
, context
.imageSuffix
);
607 if ( strcmp(&lastSlash
[1], reexportAndSuffix
) == 0 )
613 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
619 // test if child is re-exported
620 bool ImageLoaderMachOClassic::hasSubLibrary(const LinkContext
& context
, const ImageLoader
* child
) const
622 if ( fHasSubLibraries
) {
623 // need to match LC_SUB_LIBRARY string against the leaf name (without extension) of the install location of child...
624 const char* childInstallPath
= child
->getInstallPath();
625 if ( childInstallPath
!= NULL
) {
626 const char* lastSlash
= strrchr(childInstallPath
, '/');
627 if ( lastSlash
!= NULL
) {
628 const char* firstDot
= strchr(lastSlash
, '.');
630 if ( firstDot
== NULL
)
631 len
= strlen(lastSlash
);
633 len
= firstDot
-lastSlash
-1;
634 char childLeafName
[len
+1];
635 strncpy(childLeafName
, &lastSlash
[1], len
);
636 childLeafName
[len
] = '\0';
637 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
638 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
639 const struct load_command
* cmd
= cmds
;
640 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
644 const struct sub_library_command
* lib
= (struct sub_library_command
*)cmd
;
645 const char* aSubLibName
= (char*)cmd
+ lib
->sub_library
.offset
;
646 if ( strcmp(aSubLibName
, childLeafName
) == 0 )
648 if ( context
.imageSuffix
!= NULL
) {
649 // when DYLD_IMAGE_SUFFIX is used, childLeafName string needs imageSuffix removed from end
650 char aSubLibNameAndSuffix
[strlen(context
.imageSuffix
)+strlen(aSubLibName
)+1];
651 strcpy(aSubLibNameAndSuffix
, aSubLibName
);
652 strcat(aSubLibNameAndSuffix
, context
.imageSuffix
);
653 if ( strcmp(aSubLibNameAndSuffix
, childLeafName
) == 0 )
659 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
664 if ( fHasSubUmbrella
) {
665 // need to match LC_SUB_UMBRELLA string against the leaf name of install location of child...
666 const char* childInstallPath
= child
->getInstallPath();
667 if ( childInstallPath
!= NULL
) {
668 const char* lastSlash
= strrchr(childInstallPath
, '/');
669 if ( lastSlash
!= NULL
) {
670 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
671 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
672 const struct load_command
* cmd
= cmds
;
673 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
675 case LC_SUB_UMBRELLA
:
677 const struct sub_umbrella_command
* um
= (struct sub_umbrella_command
*)cmd
;
678 const char* aSubUmbrellaName
= (char*)cmd
+ um
->sub_umbrella
.offset
;
679 if ( strcmp(aSubUmbrellaName
, &lastSlash
[1]) == 0 )
681 if ( context
.imageSuffix
!= NULL
) {
682 // when DYLD_IMAGE_SUFFIX is used, lastSlash string needs imageSuffix removed from end
683 char umbrellaAndSuffix
[strlen(context
.imageSuffix
)+strlen(aSubUmbrellaName
)+1];
684 strcpy(umbrellaAndSuffix
, aSubUmbrellaName
);
685 strcat(umbrellaAndSuffix
, context
.imageSuffix
);
686 if ( strcmp(umbrellaAndSuffix
, &lastSlash
[1]) == 0 )
692 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
701 uintptr_t ImageLoaderMachOClassic::getFirstWritableSegmentAddress()
703 // in split segment libraries r_address is offset from first writable segment
704 for(unsigned int i
=0; i
< fSegmentsCount
; ++i
) {
705 if ( segWriteable(i
) )
706 return segActualLoadAddress(i
);
708 throw "no writable segment";
711 uintptr_t ImageLoaderMachOClassic::getRelocBase()
713 // r_address is either an offset from the first segment address
714 // or from the first writable segment address
716 return getFirstWritableSegmentAddress();
719 return getFirstWritableSegmentAddress();
721 return segActualLoadAddress(0);
726 #if PREBOUND_IMAGE_SUPPORT
727 void ImageLoaderMachOClassic::resetPreboundLazyPointers(const LinkContext
& context
)
729 // loop through all local (internal) relocation records looking for pre-bound-lazy-pointer values
730 const uintptr_t relocBase
= this->getRelocBase();
731 register const uintptr_t slide
= this->fSlide
;
732 const relocation_info
* const relocsStart
= (struct relocation_info
*)(&fLinkEditBase
[fDynamicInfo
->locreloff
]);
733 const relocation_info
* const relocsEnd
= &relocsStart
[fDynamicInfo
->nlocrel
];
734 for (const relocation_info
* reloc
=relocsStart
; reloc
< relocsEnd
; ++reloc
) {
735 if ( (reloc
->r_address
& R_SCATTERED
) != 0 ) {
736 const struct scattered_relocation_info
* sreloc
= (struct scattered_relocation_info
*)reloc
;
737 if (sreloc
->r_length
== RELOC_SIZE
) {
738 uintptr_t* locationToFix
= (uintptr_t*)(sreloc
->r_address
+ relocBase
);
739 switch(sreloc
->r_type
) {
741 case GENERIC_RELOC_PB_LA_PTR
:
742 *locationToFix
= sreloc
->r_value
+ slide
;
746 case ARM_RELOC_PB_LA_PTR
:
747 *locationToFix
= sreloc
->r_value
+ slide
;
760 void ImageLoaderMachOClassic::rebase(const LinkContext
& context
)
762 CRSetCrashLogMessage2(this->getPath());
763 register const uintptr_t slide
= this->fSlide
;
764 const uintptr_t relocBase
= this->getRelocBase();
766 // prefetch any LINKEDIT pages needed
767 if ( !context
.preFetchDisabled
&& !this->isPrebindable())
768 this->prefetchLINKEDIT(context
);
770 // loop through all local (internal) relocation records
771 const relocation_info
* const relocsStart
= (struct relocation_info
*)(&fLinkEditBase
[fDynamicInfo
->locreloff
]);
772 const relocation_info
* const relocsEnd
= &relocsStart
[fDynamicInfo
->nlocrel
];
773 for (const relocation_info
* reloc
=relocsStart
; reloc
< relocsEnd
; ++reloc
) {
774 uintptr_t rebaseAddr
;
776 #if LINKEDIT_USAGE_DEBUG
777 noteAccessedLinkEditAddress(reloc
);
780 // only one kind of local relocation supported for x86_64
781 if ( reloc
->r_length
!= 3 )
782 throw "bad local relocation length";
783 if ( reloc
->r_type
!= X86_64_RELOC_UNSIGNED
)
784 throw "unknown local relocation type";
785 if ( reloc
->r_pcrel
!= 0 )
786 throw "bad local relocation pc_rel";
787 if ( reloc
->r_extern
!= 0 )
788 throw "extern relocation found with local relocations";
789 rebaseAddr
= reloc
->r_address
+ relocBase
;
790 if ( ! this->containsAddress((void*)rebaseAddr
) )
791 dyld::throwf("local reloc %p not in mapped image\n", (void*)rebaseAddr
);
792 *((uintptr_t*)rebaseAddr
) += slide
;
793 if ( context
.verboseRebase
)
794 dyld::log("dyld: rebase: %s:*0x%08lX += 0x%08lX\n", this->getShortName(), rebaseAddr
, slide
);
796 if ( (reloc
->r_address
& R_SCATTERED
) == 0 ) {
797 if ( reloc
->r_symbolnum
== R_ABS
) {
798 // ignore absolute relocations
800 else if (reloc
->r_length
== RELOC_SIZE
) {
801 switch(reloc
->r_type
) {
802 case GENERIC_RELOC_VANILLA
:
803 rebaseAddr
= reloc
->r_address
+ relocBase
;
804 if ( ! this->containsAddress((void*)rebaseAddr
) )
805 dyld::throwf("local reloc %p not in mapped image\n", (void*)rebaseAddr
);
806 *((uintptr_t*)rebaseAddr
) += slide
;
807 if ( context
.verboseRebase
)
808 dyld::log("dyld: rebase: %s:*0x%08lX += 0x%08lX\n", this->getShortName(), rebaseAddr
, slide
);
811 throw "unknown local relocation type";
815 throw "bad local relocation length";
819 const struct scattered_relocation_info
* sreloc
= (struct scattered_relocation_info
*)reloc
;
820 if (sreloc
->r_length
== RELOC_SIZE
) {
821 uintptr_t* locationToFix
= (uintptr_t*)(sreloc
->r_address
+ relocBase
);
822 switch(sreloc
->r_type
) {
823 case GENERIC_RELOC_VANILLA
:
824 if ( ! this->containsAddress((void*)locationToFix
) )
825 dyld::throwf("local scattered reloc %p not in mapped image\n", locationToFix
);
826 *locationToFix
+= slide
;
827 if ( context
.verboseRebase
)
828 dyld::log("dyld: rebase: %s:*0x%08lX += 0x%08lX\n", this->getShortName(), (uintptr_t)locationToFix
, slide
);
831 case GENERIC_RELOC_PB_LA_PTR
:
835 case ARM_RELOC_PB_LA_PTR
:
840 throw "unknown local scattered relocation type";
844 throw "bad local scattered relocation length";
849 catch (const char* msg
) {
850 const uint8_t* r
= (uint8_t*)reloc
;
851 dyld::throwf("%s in %s. reloc record at %p: 0x%02X 0x%02X 0x%02X 0x%02X 0x%02X 0x%02X 0x%02X 0x%02X",
852 msg
, this->getPath(), reloc
, r
[0], r
[1], r
[2], r
[3], r
[4], r
[5], r
[6], r
[7]);
857 fgTotalRebaseFixups
+= fDynamicInfo
->nlocrel
;
858 CRSetCrashLogMessage2(NULL
);
863 const struct macho_nlist
* ImageLoaderMachOClassic::binarySearchWithToc(const char* key
, const char stringPool
[], const struct macho_nlist symbols
[],
864 const struct dylib_table_of_contents toc
[], uint32_t symbolCount
, uint32_t hintIndex
) const
866 int32_t high
= symbolCount
-1;
867 int32_t mid
= hintIndex
;
869 // handle out of range hint
870 if ( mid
>= (int32_t)symbolCount
)
872 ++ImageLoaderMachO::fgSymbolTableBinarySearchs
;
873 ++fgTotalBindImageSearches
;
875 //dyld::log("dyld: binarySearchWithToc for %s in %s\n", key, this->getShortName());
877 for (int32_t low
= 0; low
<= high
; mid
= (low
+high
)/2) {
878 const uint32_t index
= toc
[mid
].symbol_index
;
879 const struct macho_nlist
* pivot
= &symbols
[index
];
880 const char* pivotStr
= &stringPool
[pivot
->n_un
.n_strx
];
881 #if LINKEDIT_USAGE_DEBUG
882 noteAccessedLinkEditAddress(&toc
[mid
]);
883 noteAccessedLinkEditAddress(pivot
);
884 noteAccessedLinkEditAddress(pivotStr
);
886 int cmp
= strcmp(key
, pivotStr
);
901 const struct macho_nlist
* ImageLoaderMachOClassic::binarySearch(const char* key
, const char stringPool
[], const struct macho_nlist symbols
[], uint32_t symbolCount
) const
904 ++fgTotalBindImageSearches
;
905 ++ImageLoaderMachO::fgSymbolTableBinarySearchs
;
907 //dyld::log("dyld: binarySearch for %s in %s, stringpool=%p, symbols=%p, symbolCount=%u\n",
908 // key, this->getShortName(), stringPool, symbols, symbolCount);
910 const struct macho_nlist
* base
= symbols
;
911 for (uint32_t n
= symbolCount
; n
> 0; n
/= 2) {
912 const struct macho_nlist
* pivot
= &base
[n
/2];
913 const char* pivotStr
= &stringPool
[pivot
->n_un
.n_strx
];
914 #if LINKEDIT_USAGE_DEBUG
915 noteAccessedLinkEditAddress(pivot
);
916 noteAccessedLinkEditAddress(pivotStr
);
918 int cmp
= strcmp(key
, pivotStr
);
923 // move base to symbol after pivot
936 const ImageLoader::Symbol
* ImageLoaderMachOClassic::findExportedSymbol(const char* name
, const ImageLoader
** foundIn
) const
938 const struct macho_nlist
* sym
= NULL
;
939 if ( fDynamicInfo
->tocoff
== 0 )
940 sym
= binarySearch(name
, fStrings
, &fSymbolTable
[fDynamicInfo
->iextdefsym
], fDynamicInfo
->nextdefsym
);
942 sym
= binarySearchWithToc(name
, fStrings
, fSymbolTable
, (dylib_table_of_contents
*)&fLinkEditBase
[fDynamicInfo
->tocoff
],
943 fDynamicInfo
->ntoc
, fDynamicInfo
->nextdefsym
);
945 if ( foundIn
!= NULL
)
946 *foundIn
= (ImageLoader
*)this;
947 return (const Symbol
*)sym
;
954 bool ImageLoaderMachOClassic::containsSymbol(const void* addr
) const
956 return ( (fSymbolTable
<= addr
) && (addr
< fStrings
) );
960 uintptr_t ImageLoaderMachOClassic::exportedSymbolAddress(const LinkContext
& context
, const Symbol
* symbol
, const ImageLoader
* requestor
, bool runResolver
) const
962 const struct macho_nlist
* sym
= (macho_nlist
*)symbol
;
963 uintptr_t result
= sym
->n_value
+ fSlide
;
965 // processor assumes code address with low bit set is thumb
966 if (sym
->n_desc
& N_ARM_THUMB_DEF
)
972 bool ImageLoaderMachOClassic::exportedSymbolIsWeakDefintion(const Symbol
* symbol
) const
974 const struct macho_nlist
* nlistSym
= (const struct macho_nlist
*)symbol
;
975 return ( (nlistSym
->n_desc
& N_WEAK_DEF
) != 0 );
978 const char* ImageLoaderMachOClassic::exportedSymbolName(const Symbol
* symbol
) const
980 const struct macho_nlist
* nlistSym
= (const struct macho_nlist
*)symbol
;
981 return &fStrings
[nlistSym
->n_un
.n_strx
];
984 unsigned int ImageLoaderMachOClassic::exportedSymbolCount() const
986 return fDynamicInfo
->nextdefsym
;
989 const ImageLoader::Symbol
* ImageLoaderMachOClassic::exportedSymbolIndexed(unsigned int index
) const
991 if ( index
< fDynamicInfo
->nextdefsym
) {
992 const struct macho_nlist
* sym
= &fSymbolTable
[fDynamicInfo
->iextdefsym
+ index
];
993 return (const ImageLoader::Symbol
*)sym
;
998 unsigned int ImageLoaderMachOClassic::importedSymbolCount() const
1000 return fDynamicInfo
->nundefsym
;
1003 const ImageLoader::Symbol
* ImageLoaderMachOClassic::importedSymbolIndexed(unsigned int index
) const
1005 if ( index
< fDynamicInfo
->nundefsym
) {
1006 const struct macho_nlist
* sym
= &fSymbolTable
[fDynamicInfo
->iundefsym
+ index
];
1007 return (const ImageLoader::Symbol
*)sym
;
1012 const char* ImageLoaderMachOClassic::importedSymbolName(const Symbol
* symbol
) const
1014 const struct macho_nlist
* nlistSym
= (const struct macho_nlist
*)symbol
;
1015 return &fStrings
[nlistSym
->n_un
.n_strx
];
1020 bool ImageLoaderMachOClassic::symbolIsWeakDefinition(const struct macho_nlist
* symbol
)
1022 // if a define and weak ==> coalesced
1023 if ( ((symbol
->n_type
& N_TYPE
) == N_SECT
) && ((symbol
->n_desc
& N_WEAK_DEF
) != 0) )
1030 bool ImageLoaderMachOClassic::symbolIsWeakReference(const struct macho_nlist
* symbol
)
1032 // if an undefine and not referencing a weak symbol ==> coalesced
1033 if ( ((symbol
->n_type
& N_TYPE
) != N_SECT
) && ((symbol
->n_desc
& N_REF_TO_WEAK
) != 0) )
1040 uintptr_t ImageLoaderMachOClassic::getSymbolAddress(const macho_nlist
* sym
, const LinkContext
& context
, bool runResolver
) const
1042 return ImageLoaderMachO::getSymbolAddress((Symbol
*)sym
, this, context
, runResolver
);
1045 uintptr_t ImageLoaderMachOClassic::resolveUndefined(const LinkContext
& context
, const struct macho_nlist
* undefinedSymbol
,
1046 bool twoLevel
, bool dontCoalesce
, const ImageLoader
** foundIn
)
1048 ++fgTotalBindSymbolsResolved
;
1049 const char* symbolName
= &fStrings
[undefinedSymbol
->n_un
.n_strx
];
1051 #if LINKEDIT_USAGE_DEBUG
1052 noteAccessedLinkEditAddress(undefinedSymbol
);
1053 noteAccessedLinkEditAddress(symbolName
);
1055 if ( context
.bindFlat
|| !twoLevel
) {
1057 if ( ((undefinedSymbol
->n_type
& N_PEXT
) != 0) && ((undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) ) {
1058 // is a multi-module private_extern internal reference that the linker did not optimize away
1059 uintptr_t addr
= this->getSymbolAddress(undefinedSymbol
, context
, false);
1064 if ( context
.flatExportFinder(symbolName
, &sym
, foundIn
) ) {
1065 if ( *foundIn
!= this )
1066 context
.addDynamicReference(this, const_cast<ImageLoader
*>(*foundIn
));
1067 return (*foundIn
)->getExportedSymbolAddress(sym
, context
, this);
1069 // if a bundle is loaded privately the above will not find its exports
1070 if ( this->isBundle() && this->hasHiddenExports() ) {
1071 // look in self for needed symbol
1072 sym
= this->findExportedSymbol(symbolName
, foundIn
);
1074 return (*foundIn
)->getExportedSymbolAddress(sym
, context
, this);
1076 if ( (undefinedSymbol
->n_desc
& N_WEAK_REF
) != 0 ) {
1077 // definition can't be found anywhere
1078 // if reference is weak_import, then it is ok, just return 0
1081 throwSymbolNotFound(context
, symbolName
, this->getPath(), "", "flat namespace");
1084 // symbol requires searching images with coalesced symbols (not done during prebinding)
1085 if ( !context
.prebinding
&& !dontCoalesce
&& (symbolIsWeakReference(undefinedSymbol
) || symbolIsWeakDefinition(undefinedSymbol
)) ) {
1087 if ( context
.coalescedExportFinder(symbolName
, &sym
, foundIn
) ) {
1088 if ( *foundIn
!= this )
1089 context
.addDynamicReference(this, const_cast<ImageLoader
*>(*foundIn
));
1090 return (*foundIn
)->getExportedSymbolAddress(sym
, context
, this);
1092 //throwSymbolNotFound(context, symbolName, this->getPath(), "coalesced namespace");
1093 //dyld::log("dyld: coalesced symbol %s not found in any coalesced image, falling back to two-level lookup", symbolName);
1096 // if this is a real definition (not an undefined symbol) there is no ordinal
1097 if ( (undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) {
1098 // static linker should never generate this case, but if it does, do something sane
1099 uintptr_t addr
= this->getSymbolAddress(undefinedSymbol
, context
, false);
1105 ImageLoader
* target
= NULL
;
1106 uint8_t ord
= GET_LIBRARY_ORDINAL(undefinedSymbol
->n_desc
);
1107 if ( ord
== EXECUTABLE_ORDINAL
) {
1108 target
= context
.mainExecutable
;
1110 else if ( ord
== SELF_LIBRARY_ORDINAL
) {
1113 else if ( ord
== DYNAMIC_LOOKUP_ORDINAL
) {
1114 // rnielsen: HACKHACK
1117 if ( context
.flatExportFinder(symbolName
, &sym
, foundIn
) )
1118 return (*foundIn
)->getExportedSymbolAddress(sym
, context
, this);
1119 // no image has exports this symbol
1121 context
.undefinedHandler(symbolName
);
1122 // try looking again
1123 if ( context
.flatExportFinder(symbolName
, &sym
, foundIn
) )
1124 return (*foundIn
)->getExportedSymbolAddress(sym
, context
, this);
1126 throwSymbolNotFound(context
, symbolName
, this->getPath(), "", "dynamic lookup");
1128 else if ( ord
<= libraryCount() ) {
1129 target
= libImage(ord
-1);
1130 if ( target
== NULL
) {
1131 // if target library not loaded and reference is weak or library is weak return 0
1136 dyld::throwf("bad mach-o binary, library ordinal (%u) too big (max %u) for symbol %s in %s",
1137 ord
, libraryCount(), symbolName
, this->getPath());
1140 if ( target
== NULL
) {
1141 //dyld::log("resolveUndefined(%s) in %s\n", symbolName, this->getPath());
1142 throw "symbol not found";
1145 const Symbol
* sym
= target
->findExportedSymbol(symbolName
, true, foundIn
);
1147 return (*foundIn
)->getExportedSymbolAddress(sym
, context
, this);
1149 else if ( (undefinedSymbol
->n_type
& N_PEXT
) != 0 ) {
1150 // don't know why the static linker did not eliminate the internal reference to a private extern definition
1152 return this->getSymbolAddress(undefinedSymbol
, context
, false);
1154 else if ( (undefinedSymbol
->n_desc
& N_WEAK_REF
) != 0 ) {
1155 // if definition not found and reference is weak return 0
1159 // nowhere to be found
1160 throwSymbolNotFound(context
, symbolName
, this->getPath(), "", target
->getPath());
1166 // returns if 'addr' is within the address range of section 'sectionIndex'
1167 // fSlide is not used. 'addr' is assumed to be a prebound address in this image
1168 bool ImageLoaderMachOClassic::isAddrInSection(uintptr_t addr
, uint8_t sectionIndex
)
1170 uint8_t currentSectionIndex
= 1;
1171 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
1172 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
1173 const struct load_command
* cmd
= cmds
;
1174 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
1175 if ( cmd
->cmd
== LC_SEGMENT_COMMAND
) {
1176 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
1177 if ( (currentSectionIndex
<= sectionIndex
) && (sectionIndex
< currentSectionIndex
+seg
->nsects
) ) {
1178 // 'sectionIndex' is in this segment, get section info
1179 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
1180 const struct macho_section
* const section
= §ionsStart
[sectionIndex
-currentSectionIndex
];
1181 return ( (section
->addr
<= addr
) && (addr
< section
->addr
+section
->size
) );
1184 // 'sectionIndex' not in this segment, skip to next segment
1185 currentSectionIndex
+= seg
->nsects
;
1188 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
1194 void ImageLoaderMachOClassic::doBindExternalRelocations(const LinkContext
& context
)
1196 const uintptr_t relocBase
= this->getRelocBase();
1197 const bool twoLevel
= this->usesTwoLevelNameSpace();
1198 const bool prebound
= this->isPrebindable();
1200 #if TEXT_RELOC_SUPPORT
1201 // if there are __TEXT fixups, temporarily make __TEXT writable
1202 if ( fTextSegmentBinds
)
1203 this->makeTextSegmentWritable(context
, true);
1205 // cache last lookup
1206 const struct macho_nlist
* lastUndefinedSymbol
= NULL
;
1207 uintptr_t symbolAddr
= 0;
1208 const ImageLoader
* image
= NULL
;
1210 // loop through all external relocation records and bind each
1211 const relocation_info
* const relocsStart
= (struct relocation_info
*)(&fLinkEditBase
[fDynamicInfo
->extreloff
]);
1212 const relocation_info
* const relocsEnd
= &relocsStart
[fDynamicInfo
->nextrel
];
1213 for (const relocation_info
* reloc
=relocsStart
; reloc
< relocsEnd
; ++reloc
) {
1214 if (reloc
->r_length
== RELOC_SIZE
) {
1215 switch(reloc
->r_type
) {
1218 const struct macho_nlist
* undefinedSymbol
= &fSymbolTable
[reloc
->r_symbolnum
];
1219 uintptr_t* location
= ((uintptr_t*)(reloc
->r_address
+ relocBase
));
1220 if ( ! this->containsAddress((void*)location
) )
1221 dyld::throwf("external reloc %p not in mapped image %s\n", (void*)location
, this->getPath());
1222 uintptr_t value
= *location
;
1223 bool symbolAddrCached
= true;
1225 if ( reloc
->r_pcrel
) {
1226 value
+= (uintptr_t)location
+ 4 - fSlide
;
1230 // we are doing relocations, so prebinding was not usable
1231 // in a prebound executable, the n_value field of an undefined symbol is set to the address where the symbol was found when prebound
1232 // so, subtracting that gives the initial displacement which we need to add to the newly found symbol address
1233 // if mach-o relocation structs had an "addend" field this complication would not be necessary.
1234 if ( ((undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) && ((undefinedSymbol
->n_desc
& N_WEAK_DEF
) != 0) ) {
1235 // weak symbols need special casing, since *location may have been prebound to a definition in another image.
1236 // If *location is currently prebound to somewhere in the same section as the weak definition, we assume
1237 // that we can subtract off the weak symbol address to get the addend.
1238 // If prebound elsewhere, we've lost the addend and have to assume it is zero.
1239 // The prebinding to elsewhere only happens with 10.4+ update_prebinding which only operates on a small set of Apple dylibs
1240 if ( (value
== undefinedSymbol
->n_value
) || this->isAddrInSection(value
, undefinedSymbol
->n_sect
) ) {
1241 value
-= undefinedSymbol
->n_value
;
1243 // if weak and thumb subtract off extra thumb bit
1244 if ( (undefinedSymbol
->n_desc
& N_ARM_THUMB_DEF
) != 0 )
1252 else if ( ((undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) && ((undefinedSymbol
->n_desc
& N_ARM_THUMB_DEF
) != 0) ) {
1253 // it was prebound to a defined symbol for thumb code in the same linkage unit
1254 // we need to subtract off one to get real addend
1255 value
-= (undefinedSymbol
->n_value
+1);
1259 // is undefined or non-weak symbol, so do subtraction to get addend
1260 value
-= undefinedSymbol
->n_value
;
1263 // if undefinedSymbol is same as last time, then symbolAddr and image will resolve to the same too
1264 if ( undefinedSymbol
!= lastUndefinedSymbol
) {
1265 bool dontCoalesce
= true;
1266 if ( symbolIsWeakReference(undefinedSymbol
) ) {
1267 // when weakbind() is run on a classic mach-o encoding, it won't try
1268 // to coalesce N_REF_TO_WEAK symbols because they are not in the sorted
1269 // range of global symbols. To handle that case we do the coalesing now.
1270 dontCoalesce
= false;
1272 symbolAddr
= this->resolveUndefined(context
, undefinedSymbol
, twoLevel
, dontCoalesce
, &image
);
1273 lastUndefinedSymbol
= undefinedSymbol
;
1274 symbolAddrCached
= false;
1276 if ( context
.verboseBind
) {
1277 const char *path
= NULL
;
1278 if ( image
!= NULL
) {
1279 path
= image
->getShortName();
1281 const char* cachedString
= "(cached)";
1282 if ( !symbolAddrCached
)
1285 dyld::log("dyld: bind: %s:0x%08lX = %s:%s, *0x%08lX = 0x%08lX%s\n",
1286 this->getShortName(), (uintptr_t)location
,
1287 path
, &fStrings
[undefinedSymbol
->n_un
.n_strx
], (uintptr_t)location
, symbolAddr
, cachedString
);
1290 dyld::log("dyld: bind: %s:0x%08lX = %s:%s, *0x%08lX = 0x%08lX%s + %ld\n",
1291 this->getShortName(), (uintptr_t)location
,
1292 path
, &fStrings
[undefinedSymbol
->n_un
.n_strx
], (uintptr_t)location
, symbolAddr
, cachedString
, value
);
1295 value
+= symbolAddr
;
1297 if ( reloc
->r_pcrel
) {
1298 *location
= value
- ((uintptr_t)location
+ 4);
1301 // don't dirty page if prebound value was correct
1302 if ( !prebound
|| (*location
!= value
) )
1306 // don't dirty page if prebound value was correct
1307 if ( !prebound
|| (*location
!= value
) )
1311 ++fgTotalBindFixups
;
1315 throw "unknown external relocation type";
1319 throw "bad external relocation length";
1323 #if TEXT_RELOC_SUPPORT
1324 // if there were __TEXT fixups, restore write protection
1325 if ( fTextSegmentBinds
) {
1326 this->makeTextSegmentWritable(context
, true);
1333 uintptr_t ImageLoaderMachOClassic::bindIndirectSymbol(uintptr_t* ptrToBind
, const struct macho_section
* sect
, const char* symbolName
, uintptr_t targetAddr
, const ImageLoader
* targetImage
, const LinkContext
& context
)
1335 if ( context
.verboseBind
) {
1336 const char* path
= NULL
;
1337 if ( targetImage
!= NULL
)
1338 path
= targetImage
->getShortName();
1339 dyld::log("dyld: bind indirect sym: %s:%s$%s = %s:%s, *0x%08lx = 0x%08lx\n",
1340 this->getShortName(), symbolName
, (((sect
->flags
& SECTION_TYPE
)==S_NON_LAZY_SYMBOL_POINTERS
) ? "non_lazy_ptr" : "lazy_ptr"),
1341 ((path
!= NULL
) ? path
: "<weak_import-not-found>"), symbolName
, (uintptr_t)ptrToBind
, targetAddr
);
1343 if ( context
.bindingHandler
!= NULL
) {
1344 const char* path
= NULL
;
1345 if ( targetImage
!= NULL
)
1346 path
= targetImage
->getShortName();
1347 targetAddr
= (uintptr_t)context
.bindingHandler(path
, symbolName
, (void *)targetAddr
);
1350 // i386 has special self-modifying stubs that change from "CALL rel32" to "JMP rel32"
1351 if ( ((sect
->flags
& SECTION_TYPE
) == S_SYMBOL_STUBS
) && ((sect
->flags
& S_ATTR_SELF_MODIFYING_CODE
) != 0) && (sect
->reserved2
== 5) ) {
1352 uint32_t rel32
= targetAddr
- (((uint32_t)ptrToBind
)+5);
1353 // re-write instruction in a thread-safe manner
1354 // use 8-byte compare-and-swap to alter 5-byte jump table entries
1355 // loop is required in case the extra three bytes that cover the next entry are altered by another thread
1358 volatile int64_t* jumpPtr
= (int64_t*)ptrToBind
;
1360 // By default the three extra bytes swapped follow the 5-byte JMP.
1361 // But, if the 5-byte jump is up against the end of the __IMPORT segment
1362 // We don't want to access bytes off the end of the segment, so we shift
1363 // the extra bytes to precede the 5-byte JMP.
1364 if ( (((uint32_t)ptrToBind
+ 8) & 0x00000FFC) == 0x00000000 ) {
1365 jumpPtr
= (int64_t*)((uint32_t)ptrToBind
- 3);
1368 int64_t oldEntry
= *jumpPtr
;
1373 newEntry
.int64
= oldEntry
;
1374 newEntry
.bytes
[pad
+0] = 0xE9; // JMP rel32
1375 newEntry
.bytes
[pad
+1] = rel32
& 0xFF;
1376 newEntry
.bytes
[pad
+2] = (rel32
>> 8) & 0xFF;
1377 newEntry
.bytes
[pad
+3] = (rel32
>> 16) & 0xFF;
1378 newEntry
.bytes
[pad
+4] = (rel32
>> 24) & 0xFF;
1379 done
= OSAtomicCompareAndSwap64Barrier(oldEntry
, newEntry
.int64
, (int64_t*)jumpPtr
);
1384 *ptrToBind
= targetAddr
;
1388 uintptr_t ImageLoaderMachOClassic::doBindFastLazySymbol(uint32_t lazyBindingInfoOffset
, const LinkContext
& context
, void (*lock
)(), void (*unlock
)())
1390 throw "compressed LINKEDIT lazy binder called with classic LINKEDIT";
1393 uintptr_t ImageLoaderMachOClassic::doBindLazySymbol(uintptr_t* lazyPointer
, const LinkContext
& context
)
1395 // scan for all lazy-pointer sections
1396 const bool twoLevel
= this->usesTwoLevelNameSpace();
1397 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
1398 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
1399 const struct load_command
* cmd
= cmds
;
1400 const uint32_t* const indirectTable
= (uint32_t*)&fLinkEditBase
[fDynamicInfo
->indirectsymoff
];
1401 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
1403 case LC_SEGMENT_COMMAND
:
1405 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
1406 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
1407 const struct macho_section
* const sectionsEnd
= §ionsStart
[seg
->nsects
];
1408 for (const struct macho_section
* sect
=sectionsStart
; sect
< sectionsEnd
; ++sect
) {
1409 const uint8_t type
= sect
->flags
& SECTION_TYPE
;
1410 uint32_t symbolIndex
= INDIRECT_SYMBOL_LOCAL
;
1411 if ( type
== S_LAZY_SYMBOL_POINTERS
) {
1412 const size_t pointerCount
= sect
->size
/ sizeof(uintptr_t);
1413 uintptr_t* const symbolPointers
= (uintptr_t*)(sect
->addr
+ fSlide
);
1414 if ( (lazyPointer
>= symbolPointers
) && (lazyPointer
< &symbolPointers
[pointerCount
]) ) {
1415 const uint32_t indirectTableOffset
= sect
->reserved1
;
1416 const size_t lazyIndex
= lazyPointer
- symbolPointers
;
1417 symbolIndex
= indirectTable
[indirectTableOffset
+ lazyIndex
];
1421 else if ( (type
== S_SYMBOL_STUBS
) && (sect
->flags
& S_ATTR_SELF_MODIFYING_CODE
) && (sect
->reserved2
== 5) ) {
1422 // 5 bytes stubs on i386 are new "fast stubs"
1423 uint8_t* const jmpTableBase
= (uint8_t*)(sect
->addr
+ fSlide
);
1424 uint8_t* const jmpTableEnd
= jmpTableBase
+ sect
->size
;
1425 // initial CALL instruction in jump table leaves pointer to next entry, so back up
1426 uint8_t* const jmpTableEntryToPatch
= ((uint8_t*)lazyPointer
) - 5;
1427 lazyPointer
= (uintptr_t*)jmpTableEntryToPatch
;
1428 if ( (jmpTableEntryToPatch
>= jmpTableBase
) && (jmpTableEntryToPatch
< jmpTableEnd
) ) {
1429 const uint32_t indirectTableOffset
= sect
->reserved1
;
1430 const uint32_t entryIndex
= (jmpTableEntryToPatch
- jmpTableBase
)/5;
1431 symbolIndex
= indirectTable
[indirectTableOffset
+ entryIndex
];
1435 if ( symbolIndex
!= INDIRECT_SYMBOL_ABS
&& symbolIndex
!= INDIRECT_SYMBOL_LOCAL
) {
1436 const char* symbolName
= &fStrings
[fSymbolTable
[symbolIndex
].n_un
.n_strx
];
1437 const ImageLoader
* image
= NULL
;
1438 uintptr_t symbolAddr
= this->resolveUndefined(context
, &fSymbolTable
[symbolIndex
], twoLevel
, false, &image
);
1439 symbolAddr
= this->bindIndirectSymbol(lazyPointer
, sect
, symbolName
, symbolAddr
, image
, context
);
1440 ++fgTotalLazyBindFixups
;
1447 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
1449 dyld::throwf("lazy pointer not found at address %p in image %s", lazyPointer
, this->getPath());
1454 void ImageLoaderMachOClassic::initializeCoalIterator(CoalIterator
& it
, unsigned int loadOrder
)
1457 it
.symbolName
= " ";
1458 it
.loadOrder
= loadOrder
;
1459 it
.weakSymbol
= false;
1460 it
.symbolMatches
= false;
1463 if ( fDynamicInfo
->tocoff
!= 0 ) {
1465 it
.endIndex
= fDynamicInfo
->ntoc
;
1469 it
.endIndex
= fDynamicInfo
->nextdefsym
;
1474 bool ImageLoaderMachOClassic::incrementCoalIterator(CoalIterator
& it
)
1479 if ( fDynamicInfo
->tocoff
!= 0 ) {
1480 if ( it
.curIndex
>= fDynamicInfo
->ntoc
) {
1482 it
.symbolName
= "~~~";
1486 const dylib_table_of_contents
* toc
= (dylib_table_of_contents
*)&fLinkEditBase
[fDynamicInfo
->tocoff
];
1487 const uint32_t index
= toc
[it
.curIndex
].symbol_index
;
1488 const struct macho_nlist
* sym
= &fSymbolTable
[index
];
1489 const char* symStr
= &fStrings
[sym
->n_un
.n_strx
];
1490 it
.symbolName
= symStr
;
1491 it
.weakSymbol
= (sym
->n_desc
& N_WEAK_DEF
);
1492 it
.symbolMatches
= false;
1493 it
.type
= 0; // clear flag that says we applied updates for this symbol
1494 //dyld::log("incrementCoalIterator() curIndex=%ld, symbolName=%s in %s\n", it.curIndex, symStr, this->getPath());
1500 if ( it
.curIndex
>= fDynamicInfo
->nextdefsym
) {
1502 it
.symbolName
= "~~~";
1506 const struct macho_nlist
* sym
= &fSymbolTable
[fDynamicInfo
->iextdefsym
+it
.curIndex
];
1507 const char* symStr
= &fStrings
[sym
->n_un
.n_strx
];
1508 it
.symbolName
= symStr
;
1509 it
.weakSymbol
= (sym
->n_desc
& N_WEAK_DEF
);
1510 it
.symbolMatches
= false;
1511 it
.type
= 0; // clear flag that says we applied updates for this symbol
1512 //dyld::log("incrementCoalIterator() curIndex=%ld, symbolName=%s in %s\n", it.curIndex, symStr, this->getPath());
1521 uintptr_t ImageLoaderMachOClassic::getAddressCoalIterator(CoalIterator
& it
, const LinkContext
& context
)
1523 uint32_t symbol_index
= 0;
1524 if ( fDynamicInfo
->tocoff
!= 0 ) {
1525 const dylib_table_of_contents
* toc
= (dylib_table_of_contents
*)&fLinkEditBase
[fDynamicInfo
->tocoff
];
1526 symbol_index
= toc
[it
.curIndex
-1].symbol_index
;
1529 symbol_index
= fDynamicInfo
->iextdefsym
+ (uint32_t)it
.curIndex
- 1;
1531 const struct macho_nlist
* sym
= &fSymbolTable
[symbol_index
];
1532 //dyld::log("getAddressCoalIterator() => 0x%llX, %s symbol_index=%d, in %s\n", (uint64_t)(sym->n_value + fSlide), &fStrings[sym->n_un.n_strx], symbol_index, this->getPath());
1534 // processor assumes code address with low bit set is thumb
1535 if (sym
->n_desc
& N_ARM_THUMB_DEF
)
1536 return (sym
->n_value
| 1) + fSlide
;
1538 return sym
->n_value
+ fSlide
;
1540 return sym
->n_value
+ fSlide
;
1545 void ImageLoaderMachOClassic::updateUsesCoalIterator(CoalIterator
& it
, uintptr_t value
, ImageLoader
* targetImage
, const LinkContext
& context
)
1547 // flat_namespace images with classic LINKEDIT do not need late coalescing.
1548 // They still need to be iterated becuase they may implement
1549 // something needed by other coalescing images.
1550 // But they need no updating because during the bind phase every symbol lookup is a full scan.
1551 if ( !this->usesTwoLevelNameSpace() )
1554 // <rdar://problem/6570879> weak binding done too early with inserted libraries
1555 if ( this->getState() < dyld_image_state_bound
)
1558 uint32_t symbol_index
= 0;
1559 if ( fDynamicInfo
->tocoff
!= 0 ) {
1560 const dylib_table_of_contents
* toc
= (dylib_table_of_contents
*)&fLinkEditBase
[fDynamicInfo
->tocoff
];
1561 symbol_index
= toc
[it
.curIndex
-1].symbol_index
;
1564 symbol_index
= fDynamicInfo
->iextdefsym
+ (uint32_t)it
.curIndex
- 1;
1567 // if this image's copy of the symbol is not a weak definition nor a weak reference then nothing to coalesce here
1568 if ( !symbolIsWeakReference(&fSymbolTable
[symbol_index
]) && !symbolIsWeakDefinition(&fSymbolTable
[symbol_index
]) ) {
1572 // <rdar://problem/6555720> malformed dylib with duplicate weak symbols causes re-binding
1576 bool boundSomething
= false;
1577 // scan external relocations for uses of symbol_index
1578 const uintptr_t relocBase
= this->getRelocBase();
1579 const bool prebound
= this->isPrebindable();
1580 const relocation_info
* const relocsStart
= (struct relocation_info
*)(&fLinkEditBase
[fDynamicInfo
->extreloff
]);
1581 const relocation_info
* const relocsEnd
= &relocsStart
[fDynamicInfo
->nextrel
];
1582 for (const relocation_info
* reloc
=relocsStart
; reloc
< relocsEnd
; ++reloc
) {
1583 if ( reloc
->r_symbolnum
== symbol_index
) {
1584 //dyld::log("found external reloc using symbol_index=%d in %s\n",symbol_index, this->getPath());
1585 const struct macho_nlist
* undefinedSymbol
= &fSymbolTable
[reloc
->r_symbolnum
];
1586 const char* symbolName
= &fStrings
[undefinedSymbol
->n_un
.n_strx
];
1587 uintptr_t* location
= ((uintptr_t*)(reloc
->r_address
+ relocBase
));
1588 const uintptr_t initialValue
= *location
;
1589 uintptr_t addend
= 0;
1591 // we are doing relocations, so prebinding was not usable
1592 // in a prebound executable, the n_value field of an undefined symbol is set to the address where the symbol was found when prebound
1593 // so, subtracting that gives the initial displacement which we need to add to the newly found symbol address
1594 // if mach-o relocation structs had an "addend" field this complication would not be necessary.
1595 if ( ((undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) && ((undefinedSymbol
->n_desc
& N_WEAK_DEF
) != 0) ) {
1596 // weak symbols need special casing, since *location may have been prebound to a definition in another image.
1597 // If *location is currently prebound to somewhere in the same section as the weak definition, we assume
1598 // that we can subtract off the weak symbol address to get the addend.
1599 // If prebound elsewhere, we've lost the addend and have to assume it is zero.
1600 // The prebinding to elsewhere only happens with 10.4+ update_prebinding which only operates on a small set of Apple dylibs
1601 if ( (initialValue
== undefinedSymbol
->n_value
) || this->isAddrInSection(initialValue
, undefinedSymbol
->n_sect
) ) {
1602 addend
= initialValue
- undefinedSymbol
->n_value
;
1604 // if weak and thumb subtract off extra thumb bit
1605 if ( (undefinedSymbol
->n_desc
& N_ARM_THUMB_DEF
) != 0 )
1611 else if ( ((undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) && ((undefinedSymbol
->n_desc
& N_ARM_THUMB_DEF
) != 0) ) {
1612 // it was prebound to a defined symbol for thumb code in the same linkage unit
1613 // we need to subtract off one to get real addend
1614 addend
= initialValue
- (undefinedSymbol
->n_value
+1);
1618 // is undefined or non-weak symbol, so do subtraction to get addend
1619 addend
= initialValue
- undefinedSymbol
->n_value
;
1623 // non-prebound case
1624 if ( ((undefinedSymbol
->n_type
& N_TYPE
) == N_SECT
) && ((undefinedSymbol
->n_desc
& N_WEAK_DEF
) != 0) ) {
1625 // if target is weak-def in same linkage unit, then bind phase has already set initialValue
1626 // to be definition address plus addend
1627 //dyld::log("weak def, initialValue=0x%lX, undefAddr=0x%lX\n", initialValue, undefinedSymbol->n_value+fSlide);
1628 addend
= initialValue
- (undefinedSymbol
->n_value
+ fSlide
);
1630 // if weak and thumb subtract off extra thumb bit
1631 if ( (undefinedSymbol
->n_desc
& N_ARM_THUMB_DEF
) != 0 )
1636 // nothing fixed up yet, addend is just initial value
1637 //dyld::log("addend=0x%lX\n", initialValue);
1638 addend
= initialValue
;
1642 uint8_t type
= BIND_TYPE_POINTER
;
1644 if ( reloc
->r_pcrel
)
1645 type
= BIND_TYPE_TEXT_PCREL32
;
1647 this->bindLocation(context
, (uintptr_t)location
, value
, targetImage
, type
, symbolName
, addend
, "weak ");
1648 boundSomething
= true;
1652 // scan lazy and non-lazy pointers for uses of symbol_index
1653 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
1654 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
1655 const struct load_command
* cmd
= cmds
;
1656 const uint32_t* const indirectTable
= (uint32_t*)&fLinkEditBase
[fDynamicInfo
->indirectsymoff
];
1657 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
1658 if ( cmd
->cmd
== LC_SEGMENT_COMMAND
) {
1659 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
1660 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
1661 const struct macho_section
* const sectionsEnd
= §ionsStart
[seg
->nsects
];
1662 for (const struct macho_section
* sect
=sectionsStart
; sect
< sectionsEnd
; ++sect
) {
1663 uint32_t elementSize
= sizeof(uintptr_t);
1664 switch ( sect
->flags
& SECTION_TYPE
) {
1666 case S_SYMBOL_STUBS
:
1667 if ( ((sect
->flags
& S_ATTR_SELF_MODIFYING_CODE
) ==0) || (sect
->reserved2
!= 5) )
1671 case S_NON_LAZY_SYMBOL_POINTERS
:
1672 case S_LAZY_SYMBOL_POINTERS
:
1674 size_t elementCount
= sect
->size
/ elementSize
;
1675 const uint32_t indirectTableOffset
= sect
->reserved1
;
1676 uint8_t* ptrToBind
= (uint8_t*)(sect
->addr
+ fSlide
);
1677 //dyld::log(" scanning section %s of %s starting at %p\n", sect->sectname, this->getShortName(), ptrToBind);
1678 for (size_t j
=0; j
< elementCount
; ++j
, ptrToBind
+= elementSize
) {
1679 if ( indirectTable
[indirectTableOffset
+ j
] == symbol_index
) {
1680 //dyld::log(" found symbol index match at %d/%d, ptrToBind=%p\n", j, elementCount, ptrToBind);
1682 this->bindIndirectSymbol((uintptr_t*)ptrToBind
, sect
, it
.symbolName
, value
, targetImage
, context
);
1683 boundSomething
= true;
1691 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
1693 if ( boundSomething
&& (targetImage
!= this) ) {
1694 context
.addDynamicReference(this, targetImage
);
1697 // mark that this symbol has already been bound, so we don't try to bind again
1702 void ImageLoaderMachOClassic::bindIndirectSymbolPointers(const LinkContext
& context
, bool bindNonLazys
, bool bindLazys
)
1704 // scan for all non-lazy-pointer sections
1705 const bool twoLevel
= this->usesTwoLevelNameSpace();
1706 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
1707 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
1708 const struct load_command
* cmd
= cmds
;
1709 const uint32_t* const indirectTable
= (uint32_t*)&fLinkEditBase
[fDynamicInfo
->indirectsymoff
];
1710 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
1712 case LC_SEGMENT_COMMAND
:
1714 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
1715 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
1716 const struct macho_section
* const sectionsEnd
= §ionsStart
[seg
->nsects
];
1717 for (const struct macho_section
* sect
=sectionsStart
; sect
< sectionsEnd
; ++sect
) {
1718 bool isLazySymbol
= false;
1719 const uint8_t type
= sect
->flags
& SECTION_TYPE
;
1720 uint32_t elementSize
= sizeof(uintptr_t);
1721 size_t elementCount
= sect
->size
/ elementSize
;
1722 if ( type
== S_NON_LAZY_SYMBOL_POINTERS
) {
1723 if ( ! bindNonLazys
)
1726 else if ( type
== S_LAZY_SYMBOL_POINTERS
) {
1727 // process each symbol pointer in this section
1728 fgTotalPossibleLazyBindFixups
+= elementCount
;
1729 isLazySymbol
= true;
1734 else if ( (type
== S_SYMBOL_STUBS
) && (sect
->flags
& S_ATTR_SELF_MODIFYING_CODE
) && (sect
->reserved2
== 5) ) {
1735 // process each jmp entry in this section
1736 elementCount
= sect
->size
/ 5;
1738 fgTotalPossibleLazyBindFixups
+= elementCount
;
1739 isLazySymbol
= true;
1747 const uint32_t indirectTableOffset
= sect
->reserved1
;
1748 uint8_t* ptrToBind
= (uint8_t*)(sect
->addr
+ fSlide
);
1749 for (size_t j
=0; j
< elementCount
; ++j
, ptrToBind
+= elementSize
) {
1750 #if LINKEDIT_USAGE_DEBUG
1751 noteAccessedLinkEditAddress(&indirectTable
[indirectTableOffset
+ j
]);
1753 uint32_t symbolIndex
= indirectTable
[indirectTableOffset
+ j
];
1754 if ( symbolIndex
== INDIRECT_SYMBOL_LOCAL
) {
1755 *((uintptr_t*)ptrToBind
) += this->fSlide
;
1757 else if ( symbolIndex
== INDIRECT_SYMBOL_ABS
) {
1758 // do nothing since already has absolute address
1761 const struct macho_nlist
* sym
= &fSymbolTable
[symbolIndex
];
1762 if ( symbolIndex
== 0 ) {
1763 // This could be rdar://problem/3534709
1764 if ( ((const macho_header
*)fMachOData
)->filetype
== MH_EXECUTE
) {
1765 static bool alreadyWarned
= false;
1766 if ( (sym
->n_type
& N_TYPE
) != N_UNDF
) {
1767 // The indirect table parallels the (non)lazy pointer sections. For
1768 // instance, to find info about the fifth lazy pointer you look at the
1769 // fifth entry in the indirect table. (try otool -Iv on a file).
1770 // The entry in the indirect table contains an index into the symbol table.
1772 // The bug in ld caused the entry in the indirect table to be zero
1773 // (instead of a magic value that means a local symbol). So, if the
1774 // symbolIndex == 0, we may be encountering the bug, or 0 may be a valid
1775 // symbol table index. The check I put in place is to see if the zero'th
1776 // symbol table entry is an import entry (usually it is a local symbol
1778 if ( context
.verboseWarnings
&& !alreadyWarned
) {
1779 dyld::log("dyld: malformed executable '%s', skipping indirect symbol to %s\n",
1780 this->getPath(), &fStrings
[sym
->n_un
.n_strx
]);
1781 alreadyWarned
= true;
1787 const ImageLoader
* image
= NULL
;
1788 // let weak definitions resolve to themselves, later coalescing may overwrite them
1789 bool dontCoalesce
= true;
1790 if ( bindLazys
&& isLazySymbol
) {
1791 // if this is something normally lazy bound, but we are forcing
1792 // it to be bound now, do coalescing
1793 dontCoalesce
= false;
1795 if ( symbolIsWeakReference(sym
) ) {
1796 // when weakbind() is run on a classic mach-o encoding, it won't try
1797 // to coalesce N_REF_TO_WEAK symbols because they are not in the sorted
1798 // range of global symbols. To handle that case we do the coalesing now.
1799 dontCoalesce
= false;
1801 uintptr_t symbolAddr
= resolveUndefined(context
, sym
, twoLevel
, dontCoalesce
, &image
);
1803 symbolAddr
= this->bindIndirectSymbol((uintptr_t*)ptrToBind
, sect
, &fStrings
[sym
->n_un
.n_strx
], symbolAddr
, image
, context
);
1805 ++fgTotalBindFixups
;
1812 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
1819 void ImageLoaderMachOClassic::initializeLazyStubs(const LinkContext
& context
)
1821 if ( ! this->usablePrebinding(context
) ) {
1822 // reset all "fast" stubs
1823 const macho_header
* mh
= (macho_header
*)fMachOData
;
1824 const uint32_t cmd_count
= mh
->ncmds
;
1825 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
1826 const struct load_command
* cmd
= cmds
;
1827 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
1829 case LC_SEGMENT_COMMAND
:
1831 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
1832 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
1833 const struct macho_section
* const sectionsEnd
= §ionsStart
[seg
->nsects
];
1834 for (const struct macho_section
* sect
=sectionsStart
; sect
< sectionsEnd
; ++sect
) {
1835 const uint8_t type
= sect
->flags
& SECTION_TYPE
;
1836 if ( (type
== S_SYMBOL_STUBS
) && (sect
->flags
& S_ATTR_SELF_MODIFYING_CODE
) && (sect
->reserved2
== 5) ) {
1837 // reset each jmp entry in this section
1838 const uint32_t indirectTableOffset
= sect
->reserved1
;
1839 const uint32_t* const indirectTable
= (uint32_t*)&fLinkEditBase
[fDynamicInfo
->indirectsymoff
];
1840 uint8_t* start
= (uint8_t*)(sect
->addr
+ this->fSlide
);
1841 uint8_t* end
= start
+ sect
->size
;
1842 uintptr_t dyldHandler
= (uintptr_t)&stub_binding_helper_i386_old
;
1843 uint32_t entryIndex
= 0;
1844 for (uint8_t* entry
= start
; entry
< end
; entry
+= 5, ++entryIndex
) {
1845 bool installLazyHandler
= true;
1846 // jump table entries that cross a (64-byte) cache line boundary have the potential to cause crashes
1847 // if the instruction is updated by one thread while being executed by another
1848 if ( ((uint32_t)entry
& 0xFFFFFFC0) != ((uint32_t)entry
+4 & 0xFFFFFFC0) ) {
1849 // need to bind this now to avoid a potential problem if bound lazily
1850 uint32_t symbolIndex
= indirectTable
[indirectTableOffset
+ entryIndex
];
1851 // the latest linker marks 64-byte crossing stubs with INDIRECT_SYMBOL_ABS so they are not used
1852 if ( symbolIndex
!= INDIRECT_SYMBOL_ABS
) {
1853 const char* symbolName
= &fStrings
[fSymbolTable
[symbolIndex
].n_un
.n_strx
];
1854 const ImageLoader
* image
= NULL
;
1856 uintptr_t symbolAddr
= this->resolveUndefined(context
, &fSymbolTable
[symbolIndex
], this->usesTwoLevelNameSpace(), false, &image
);
1857 symbolAddr
= this->bindIndirectSymbol((uintptr_t*)entry
, sect
, symbolName
, symbolAddr
, image
, context
);
1858 ++fgTotalBindFixups
;
1859 uint32_t rel32
= symbolAddr
- (((uint32_t)entry
)+5);
1860 entry
[0] = 0xE9; // JMP rel32
1861 entry
[1] = rel32
& 0xFF;
1862 entry
[2] = (rel32
>> 8) & 0xFF;
1863 entry
[3] = (rel32
>> 16) & 0xFF;
1864 entry
[4] = (rel32
>> 24) & 0xFF;
1865 installLazyHandler
= false;
1867 catch (const char* msg
) {
1868 // ignore errors when binding symbols early
1869 // maybe the function is never called, and therefore erroring out now would be a regression
1873 if ( installLazyHandler
) {
1874 uint32_t rel32
= dyldHandler
- (((uint32_t)entry
)+5);
1875 entry
[0] = 0xE8; // CALL rel32
1876 entry
[1] = rel32
& 0xFF;
1877 entry
[2] = (rel32
>> 8) & 0xFF;
1878 entry
[3] = (rel32
>> 16) & 0xFF;
1879 entry
[4] = (rel32
>> 24) & 0xFF;
1886 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
1893 void ImageLoaderMachOClassic::doBind(const LinkContext
& context
, bool forceLazysBound
)
1895 CRSetCrashLogMessage2(this->getPath());
1897 this->initializeLazyStubs(context
);
1900 // if prebound and loaded at prebound address, and all libraries are same as when this was prebound, then no need to bind
1901 // note: flat-namespace binaries need to have imports rebound (even if correctly prebound)
1902 if ( this->usablePrebinding(context
) ) {
1903 // binding already up to date
1906 // no valid prebinding, so bind symbols.
1907 // values bound by name are stored two different ways in classic mach-o:
1909 #if TEXT_RELOC_SUPPORT
1910 // if there are __TEXT fixups, temporarily make __TEXT writable
1911 if ( fTextSegmentBinds
)
1912 this->makeTextSegmentWritable(context
, true);
1915 // 1) external relocations are used for data initialized to external symbols
1916 this->doBindExternalRelocations(context
);
1918 // 2) "indirect symbols" are used for code references to external symbols
1919 // if this image is in the shared cache, there is no way to reset the lazy pointers, so bind them now
1920 this->bindIndirectSymbolPointers(context
, true, forceLazysBound
|| fInSharedCache
);
1922 #if TEXT_RELOC_SUPPORT
1923 // if there were __TEXT fixups, restore write protection
1924 if ( fTextSegmentBinds
)
1925 this->makeTextSegmentWritable(context
, false);
1929 // set up dyld entry points in image
1930 this->setupLazyPointerHandler(context
);
1932 CRSetCrashLogMessage2(NULL
);
1935 void ImageLoaderMachOClassic::doBindJustLazies(const LinkContext
& context
)
1937 // some API called requested that all lazy pointers in this image be force bound
1938 this->bindIndirectSymbolPointers(context
, false, true);
1941 void ImageLoaderMachOClassic::doInterpose(const LinkContext
& context
)
1943 if ( context
.verboseInterposing
)
1944 dyld::log("dyld: interposing %lu tuples onto: %s\n", fgInterposingTuples
.size(), this->getPath());
1946 // scan indirect symbols
1947 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
1948 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
1949 const struct load_command
* cmd
= cmds
;
1950 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
1952 case LC_SEGMENT_COMMAND
:
1954 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
1955 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
1956 const struct macho_section
* const sectionsEnd
= §ionsStart
[seg
->nsects
];
1957 for (const struct macho_section
* sect
=sectionsStart
; sect
< sectionsEnd
; ++sect
) {
1958 const uint8_t type
= sect
->flags
& SECTION_TYPE
;
1959 if ( (type
== S_NON_LAZY_SYMBOL_POINTERS
) || (type
== S_LAZY_SYMBOL_POINTERS
) ) {
1960 const size_t pointerCount
= sect
->size
/ sizeof(uintptr_t);
1961 uintptr_t* const symbolPointers
= (uintptr_t*)(sect
->addr
+ fSlide
);
1962 for (size_t pointerIndex
=0; pointerIndex
< pointerCount
; ++pointerIndex
) {
1963 uintptr_t newValue
= interposedAddress(context
, symbolPointers
[pointerIndex
], this);
1964 if ( newValue
!= symbolPointers
[pointerIndex
] )
1965 symbolPointers
[pointerIndex
] = newValue
;
1969 // i386 has special self-modifying stubs that might be prebound to "JMP rel32" that need checking
1970 else if ( (type
== S_SYMBOL_STUBS
) && ((sect
->flags
& S_ATTR_SELF_MODIFYING_CODE
) != 0) && (sect
->reserved2
== 5) ) {
1971 // check each jmp entry in this section
1972 uint8_t* start
= (uint8_t*)(sect
->addr
+ this->fSlide
);
1973 uint8_t* end
= start
+ sect
->size
;
1974 for (uint8_t* entry
= start
; entry
< end
; entry
+= 5) {
1975 if ( entry
[0] == 0xE9 ) { // 0xE9 == JMP
1976 uint32_t rel32
= *((uint32_t*)&entry
[1]); // assume unaligned load of uint32_t is ok
1977 uint32_t target
= (uint32_t)&entry
[5] + rel32
;
1978 uint32_t newTarget
= interposedAddress(context
, target
, this);
1979 if ( newTarget
!= target
) {
1980 uint32_t newRel32
= newTarget
- (uint32_t)&entry
[5];
1981 *((uint32_t*)&entry
[1]) = newRel32
; // assume unaligned store of uint32_t is ok
1991 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
1994 // scan external relocations
1995 const uintptr_t relocBase
= this->getRelocBase();
1996 const relocation_info
* const relocsStart
= (struct relocation_info
*)(&fLinkEditBase
[fDynamicInfo
->extreloff
]);
1997 const relocation_info
* const relocsEnd
= &relocsStart
[fDynamicInfo
->nextrel
];
1998 for (const relocation_info
* reloc
=relocsStart
; reloc
< relocsEnd
; ++reloc
) {
1999 if (reloc
->r_length
== RELOC_SIZE
) {
2000 switch(reloc
->r_type
) {
2003 uintptr_t* location
= ((uintptr_t*)(reloc
->r_address
+ relocBase
));
2004 uintptr_t value
= *location
;
2005 uintptr_t newValue
= interposedAddress(context
, value
, this);
2006 if ( newValue
!= value
)
2007 *location
= newValue
;
2015 void ImageLoaderMachOClassic::dynamicInterpose(const LinkContext
& context
)
2017 if ( context
.verboseInterposing
)
2018 dyld::log("dyld: dynamic interposing %lu tuples onto image: %s\n", context
.dynamicInterposeCount
, this->getPath());
2020 // scan indirect symbols
2021 const uint32_t cmd_count
= ((macho_header
*)fMachOData
)->ncmds
;
2022 const struct load_command
* const cmds
= (struct load_command
*)&fMachOData
[sizeof(macho_header
)];
2023 const struct load_command
* cmd
= cmds
;
2024 for (uint32_t i
= 0; i
< cmd_count
; ++i
) {
2026 case LC_SEGMENT_COMMAND
:
2028 const struct macho_segment_command
* seg
= (struct macho_segment_command
*)cmd
;
2029 const struct macho_section
* const sectionsStart
= (struct macho_section
*)((char*)seg
+ sizeof(struct macho_segment_command
));
2030 const struct macho_section
* const sectionsEnd
= §ionsStart
[seg
->nsects
];
2031 for (const struct macho_section
* sect
=sectionsStart
; sect
< sectionsEnd
; ++sect
) {
2032 const uint8_t type
= sect
->flags
& SECTION_TYPE
;
2033 if ( (type
== S_NON_LAZY_SYMBOL_POINTERS
) || (type
== S_LAZY_SYMBOL_POINTERS
) ) {
2034 const size_t pointerCount
= sect
->size
/ sizeof(uintptr_t);
2035 uintptr_t* const symbolPointers
= (uintptr_t*)(sect
->addr
+ fSlide
);
2036 for (size_t pointerIndex
=0; pointerIndex
< pointerCount
; ++pointerIndex
) {
2037 for(size_t i
=0; i
< context
.dynamicInterposeCount
; ++i
) {
2038 // replace all references to 'replacee' with 'replacement'
2039 if ( symbolPointers
[pointerIndex
] == (uintptr_t)context
.dynamicInterposeArray
[i
].replacee
) {
2040 if ( context
.verboseInterposing
) {
2041 dyld::log("dyld: dynamic interposing: at %p replace %p with %p in %s\n",
2042 &symbolPointers
[pointerIndex
], context
.dynamicInterposeArray
[i
].replacee
, context
.dynamicInterposeArray
[i
].replacement
, this->getPath());
2044 symbolPointers
[pointerIndex
] = (uintptr_t)context
.dynamicInterposeArray
[i
].replacement
;
2053 cmd
= (const struct load_command
*)(((char*)cmd
)+cmd
->cmdsize
);
2056 // scan external relocations
2057 const uintptr_t relocBase
= this->getRelocBase();
2058 const relocation_info
* const relocsStart
= (struct relocation_info
*)(&fLinkEditBase
[fDynamicInfo
->extreloff
]);
2059 const relocation_info
* const relocsEnd
= &relocsStart
[fDynamicInfo
->nextrel
];
2060 for (const relocation_info
* reloc
=relocsStart
; reloc
< relocsEnd
; ++reloc
) {
2061 if (reloc
->r_length
== RELOC_SIZE
) {
2062 switch(reloc
->r_type
) {
2065 uintptr_t* location
= ((uintptr_t*)(reloc
->r_address
+ relocBase
));
2066 for(size_t i
=0; i
< context
.dynamicInterposeCount
; ++i
) {
2067 // replace all references to 'replacee' with 'replacement'
2068 if ( *location
== (uintptr_t)context
.dynamicInterposeArray
[i
].replacee
) {
2069 if ( context
.verboseInterposing
) {
2070 dyld::log("dyld: dynamic interposing: at %p replace %p with %p in %s\n",
2071 location
, context
.dynamicInterposeArray
[i
].replacee
, context
.dynamicInterposeArray
[i
].replacement
, this->getPath());
2073 *location
= (uintptr_t)context
.dynamicInterposeArray
[i
].replacement
;
2084 const char* ImageLoaderMachOClassic::findClosestSymbol(const void* addr
, const void** closestAddr
) const
2086 uintptr_t targetAddress
= (uintptr_t)addr
- fSlide
;
2087 const struct macho_nlist
* bestSymbol
= NULL
;
2088 // first walk all global symbols
2089 const struct macho_nlist
* const globalsStart
= &fSymbolTable
[fDynamicInfo
->iextdefsym
];
2090 const struct macho_nlist
* const globalsEnd
= &globalsStart
[fDynamicInfo
->nextdefsym
];
2091 for (const struct macho_nlist
* s
= globalsStart
; s
< globalsEnd
; ++s
) {
2092 if ( (s
->n_type
& N_TYPE
) == N_SECT
) {
2093 if ( bestSymbol
== NULL
) {
2094 if ( s
->n_value
<= targetAddress
)
2097 else if ( (s
->n_value
<= targetAddress
) && (bestSymbol
->n_value
< s
->n_value
) ) {
2102 // next walk all local symbols
2103 const struct macho_nlist
* const localsStart
= &fSymbolTable
[fDynamicInfo
->ilocalsym
];
2104 const struct macho_nlist
* const localsEnd
= &localsStart
[fDynamicInfo
->nlocalsym
];
2105 for (const struct macho_nlist
* s
= localsStart
; s
< localsEnd
; ++s
) {
2106 if ( ((s
->n_type
& N_TYPE
) == N_SECT
) && ((s
->n_type
& N_STAB
) == 0) ) {
2107 if ( bestSymbol
== NULL
) {
2108 if ( s
->n_value
<= targetAddress
)
2111 else if ( (s
->n_value
<= targetAddress
) && (bestSymbol
->n_value
< s
->n_value
) ) {
2116 if ( bestSymbol
!= NULL
) {
2118 if (bestSymbol
->n_desc
& N_ARM_THUMB_DEF
)
2119 *closestAddr
= (void*)((bestSymbol
->n_value
| 1) + fSlide
);
2121 *closestAddr
= (void*)(bestSymbol
->n_value
+ fSlide
);
2123 *closestAddr
= (void*)(bestSymbol
->n_value
+ fSlide
);
2125 return &fStrings
[bestSymbol
->n_un
.n_strx
];