service_runtime/sel_validate_image.c

   1 /*
   2  * Copyright 2008, Google Inc.
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions are
   7  * met:
   8  *
   9  *     * Redistributions of source code must retain the above copyright
  10  * notice, this list of conditions and the following disclaimer.
  11  *     * Redistributions in binary form must reproduce the above
  12  * copyright notice, this list of conditions and the following disclaimer
  13  * in the documentation and/or other materials provided with the
  14  * distribution.
  15  *     * Neither the name of Google Inc. nor the names of its
  16  * contributors may be used to endorse or promote products derived from
  17  * this software without specific prior written permission.
  18  *
  19  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  20  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  21  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  22  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  23  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  24  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  25  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  26  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  27  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  28  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  29  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  30  */
  31
  32 /*
  33  * Invoke validator for NaCl secure ELF loader (NaCl SEL).
  34  */
  35
  36 #include <string.h>
  37
  38 #include "native_client/service_runtime/nacl_log.h"
  39 #include "native_client/service_runtime/sel_ldr.h"
  40 #include "native_client/service_runtime/sel_util.h"
  41 #include "native_client/service_runtime/tramp.h"
  42 #include "native_client/ncv/ncvalidate.h"
  43
  44 static int g_ignore_validator_result = 0;
  45 void NaClIgnoreValidatorResult() {
  46   g_ignore_validator_result = 1;
  47 }
  48
  49 NaClErrorCode NaClValidateImage(struct NaClApp  *nap)
  50 {
  51   uintptr_t               memp;
  52   uintptr_t               endp;
  53   struct NCValidatorState *vstate;
  54   size_t                  regionsize;
  55   NaClErrorCode           rcode = LOAD_BAD_FILE;
  56
  57   memp = nap->mem_start + NACL_TRAMPOLINE_SIZE;
  58   regionsize = nap->text_region_bytes;
  59
  60   endp = memp + regionsize;
  61   if (endp < memp) {
  62     return LOAD_NO_MEMORY;
  63   }
  64
  65   vstate = NCValidateInit(memp, endp, nap->align_boundary);
  66   if (vstate == NULL) return LOAD_BAD_FILE;
  67   NCValidateSegment((uint8_t *)memp, memp, regionsize, vstate);
  68   if (NCValidateFinish(vstate) == 0) {
  69     rcode = LOAD_OK;
  70   } else {
  71     if (g_ignore_validator_result) {
  72       NaClLog(LOG_ERROR, "VALIDATION FAILED: continuing anyway...\n");
  73       rcode = LOAD_OK;
  74     } else {
  75       NaClLog(LOG_ERROR, "VALIDATION FAILED.\n");
  76       NaClLog(LOG_ERROR,
  77               "Run sel_ldr in debug mode to ignore validation failure.\n");
  78       rcode = LOAD_BAD_FILE;
  79     }
  80   }
  81   NCValidateFreeState(&vstate);
  82   return rcode;
  83 }