X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/89b3af67bb32e691275bf6fa803d1834b2284115..7ddcb079202367355dddccdfa4318e57d50318be:/bsd/sys/imgact.h

diff --git a/bsd/sys/imgact.h b/bsd/sys/imgact.h
index cef71ad2c..0a194b779 100644
--- a/bsd/sys/imgact.h
+++ b/bsd/sys/imgact.h
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2004 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2004-2005 Apple Computer, Inc. All rights reserved.
  *
  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
  * 
@@ -57,11 +57,18 @@
  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  * SUCH DAMAGE.
  */
+/*
+ * NOTICE: This file was modified by SPARTA, Inc. in 2005 to introduce
+ * support for mandatory and extensible security protections.  This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ */
 #ifndef _SYS_IMGACT_H_
 #define	_SYS_IMGACT_H_
 
 #define	IMG_SHSIZE	512	/* largest shell interpreter, in bytes */
 
+struct label;
 struct proc;
 struct nameidata;
 
@@ -69,41 +76,60 @@ struct image_params {
 	user_addr_t	ip_user_fname;		/* argument */
 	user_addr_t	ip_user_argv;		/* argument */
 	user_addr_t	ip_user_envv;		/* argument */
+	int		ip_seg;			/* segment for arguments */
 	struct vnode	*ip_vp;			/* file */
 	struct vnode_attr	*ip_vattr;	/* run file attributes */
 	struct vnode_attr	*ip_origvattr;	/* invocation file attributes */
+	cpu_type_t	ip_origcputype;		/* cputype of invocation file */
+	cpu_subtype_t	ip_origcpusubtype;	/* subtype of invocation file */
 	char		*ip_vdata;		/* file data (up to one page) */
 	int		ip_flags;		/* image flags */
 	int		ip_argc;		/* argument count */
-	char		*ip_argv;		/* argument vector beginning */
 	int		ip_envc;		/* environment count */
+	int		ip_applec;		/* apple vector count */
+
+	char		*ip_startargv;		/* argument vector beginning */
+	char		*ip_endargv;	/* end of argv/start of envv */
+	char		*ip_endenvv;	/* end of envv/start of applev */
+
 	char		*ip_strings;		/* base address for strings */
 	char		*ip_strendp;		/* current end pointer */
-	char		*ip_strendargvp;	/* end of argv/start of envp */
-	int		ip_strspace;		/* remaining space */
+
+	int 		ip_argspace;	/* remaining space of NCARGS limit (argv+envv) */
+	int		ip_strspace;		/* remaining total string space */
+
 	user_size_t 	ip_arch_offset;		/* subfile offset in ip_vp */
 	user_size_t 	ip_arch_size;		/* subfile length in ip_vp */
-	char		ip_interp_name[IMG_SHSIZE];	/* interpreter name */
+	char		ip_interp_buffer[IMG_SHSIZE];	/* interpreter buffer space */
+	int		ip_interp_sugid_fd;		/* fd for sugid script */
 
 	/* Next two fields are for support of architecture translation... */
 	char		*ip_p_comm;		/* optional alt p->p_comm */
-	char		*ip_tws_cache_name;	/* task working set cache */
 	struct vfs_context	*ip_vfs_context;	/* VFS context */
 	struct nameidata *ip_ndp;		/* current nameidata */
-	thread_t	ip_vfork_thread;	/* thread created, if vfork */
+	thread_t	ip_new_thread;		/* thread for spawn/vfork */
+
+	struct label	*ip_execlabelp;		/* label of the executable */
+	struct label	*ip_scriptlabelp;	/* label of the script */
+	unsigned int	ip_csflags;		/* code signing flags */
+	void		*ip_px_sa;
+	void		*ip_px_sfa;
+	void		*ip_px_spa;
 };
 
 /*
  * Image flags
  */
-#define	IMGPF_NONE	0x00000000		/* No flags */
-#define	IMGPF_INTERPRET	0x00000001		/* Interpreter invoked */
-#if defined (__i386__) || defined(__x86_64__)
-#define	IMGPF_POWERPC	0x00000002		/* ppc mode */
-#else
-#define	IMGPF_RESERVED1	0x00000002		/* reserved */
+#define	IMGPF_NONE		0x00000000	/* No flags */
+#define	IMGPF_INTERPRET		0x00000001	/* Interpreter invoked */
+#define	IMGPF_POWERPC		0x00000002	/* ppc mode for x86 */
+#if CONFIG_EMBEDDED
+#undef IMGPF_POWERPC
 #endif
-#define	IMGPF_WAS_64BIT	0x00000004		/* exec from a 64Bit binary */
-#define	IMGPF_IS_64BIT	0x00000008		/* exec to a 64Bit binary */
+#define	IMGPF_WAS_64BIT		0x00000004	/* exec from a 64Bit binary */
+#define	IMGPF_IS_64BIT		0x00000008	/* exec to a 64Bit binary */
+#define	IMGPF_SPAWN		0x00000010	/* spawn (without setexec) */
+#define	IMGPF_DISABLE_ASLR	0x00000020	/* disable ASLR */
+#define	IMGPF_ALLOW_DATA_EXEC	0x00000040	/* forcibly disallow data execution */
 
 #endif	/* !_SYS_IMGACT */