1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87
|
#!/usr/bin/env perl
# Copyright (C) 2009 Red Hat Inc.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
use strict;
use warnings;
# the output of readelf is parsed
$ENV{LANG} = "C";
if ($ENV{SKIP_TEST_NOEXEC_STACK_PL}) {
print "$0: skipped test because environment variable is set\n";
exit 77;
}
die("NOEXEC_CHECK not set") unless(exists($ENV{NOEXEC_CHECK}));
my @files = split(/ /, $ENV{NOEXEC_CHECK});
FILES: foreach my $file (@files) {
my $output;
my @cmd = ('readelf', '-l', $file);
open($output, '-|', @cmd)
or die("$0: failed to run: '".join(' ', @cmd)."': $!\n");
my $offset;
my $line = 1;
# Find the offset of the Flags field
while(<$output>) {
next unless(/^\s*Type\b/);
my @lines;
push(@lines, $_);
# Look for a Flg field on this line (32 bit)
$offset = index($_, 'Flg ');
if(-1 == $offset) {
# 64 bit is split over 2 lines. Look for a Flags field on the next
# line
$_ = <$output>;
$offset = index($_, 'Flags ');
$line = 2;
push(@lines, $_);
}
die("Unrecognised header: ".join("\n", @lines)) if(-1 == $offset);
last;
}
# Find the GNU_STACK entry
while(<$output>) {
next unless(/^\s*GNU_STACK\b/);
# Skip over input lines according to the header
for(my $i = 1; $i < $line; $i++) {
$_ = <$output>;
}
my $flags = substr($_, $offset, 3);
$flags =~ /^[ R][ W]([ E])$/ or die("Unrecognised flags: $flags");
if('E' eq $1) {
print "***** $file has an executable stack *****\n";
exit(1);
}
next FILES;
}
die("Didn't find GNU_STACK entry");
}
|